Username case insensitivity

[Luveh Keraph]

I had tried before several variations of what you propose, to no avail. I
finally got it working by adding the following line in the configuration of
the "files" module.

key = "%{%{Stripped-User-Name}:-%{tolower:%{User-Name}}}"

On Sun, Feb 23, 2020 at 6:02 AM Alan DeKok <aland at deployingradius.com>
wrote:

> On Feb 21, 2020, at 11:44 PM, Luveh Keraph <1.41421 at gmail.com> wrote:
> > All user names that the FreeRADIUS receives for authentication. The
> password should remain case-sensitive.
>
>   That's generally not a good idea.  For one, databases aren't typically
> case-insensitive.  So those might see "bob" as different users / accounts /
> billing than user "BOB".
>
>   If you don't care about case, then the simplest way to fix it is to just
> mash the User-Name to lowercase.  For various reasons, you should do it
> this way:
>
> authorize {
>         update request {
>                 Stripped-User-Name := "%{tolower:%{User-Name}}"
>         }
>         ... everything else ...
>
> }
>
>   That is the simplest way to do it, and the most likely to work for all
> modules.
>
> > I am just using the basic capabilities provided by FreeRADIUS - entries
> in /etc/raddb/users. The user name and password information is retrieved
> from that file.
>
>   The sample configuration for the "files" module tells you how to change
> the key used for lookups.  You can just change that to do case-insensitive
> lookups.
>
> > I tried adding a policy for this in /etc/raddb/policy.d, but I couldn't
> get that to work either.
>
>   "I tried to do stuff, but it didn't work".
>
>   That isn't a useful thing to say.  It's better to describe WHAT you did,
> WHY you did it, and WHAT happened.
>
>   Alan DeKok.
>
>