<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I've about got it, but now I am getting an eap error about the username
isn't correct.<br>
<br>
I added this about preprocess:<br>
attr_rewrite add-dollar-sign {<br>
attribute = User-Name<br>
searchfor = "^host/(.*)"<br>
searchin = packet<br>
new_attribute = no<br>
replacewith = "%{1}$"<br>
}<br>
<br>
I've added add-dollar-sign to authorize { section.<br>
<br>
rad_recv: Access-Request packet from host 10.1.22.11:2135, id=64,
length=168<br>
NAS-IP-Address = 10.1.22.11<br>
NAS-Port-Type = Wireless-802.11<br>
NAS-Port = 12<br>
Framed-MTU = 1400<br>
User-Name = "host/itf-toshiba-asd"<br>
Calling-Station-Id = "000e35ff2a82"<br>
Called-Station-Id = "00186ecfa600"<br>
NAS-Identifier = "ap01.intranet.domain.com"<br>
EAP-Message =
0x02010019234486f73742f6974662d746f73686962612d617364<br>
Message-Authenticator = 0x2b72b4ab80aaf3aa96b4613f3ab872341d<br>
Processing the authorize section of radiusd.conf<br>
modcall: entering group authorize for request 2<br>
radius_xlat: '^host/(.*)'<br>
radius_xlat: 'itf-toshiba-asd$'<br>
rlm_attr_rewrite: Changed value for attribute User-Name from
'host/itf-toshiba-asd' to 'itf-toshiba-asd$'<br>
modcall[authorize]: module "add-dollar-sign" returns ok for request 2<br>
modcall[authorize]: module "preprocess" returns ok for request 2<br>
modcall[authorize]: module "chap" returns noop for request 2<br>
modcall[authorize]: module "mschap" returns noop for request 2<br>
rlm_realm: No '\' in User-Name = "itf-toshiba-asd$", looking up
realm NULL<br>
rlm_realm: No such realm "NULL"<br>
modcall[authorize]: module "DOMAIN" returns noop for request 2<br>
rlm_eap: EAP packet type response id 1 length 25<br>
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation<br>
modcall[authorize]: module "eap" returns updated for request 2<br>
rlm_ldap: Entering ldap_groupcmp()<br>
radius_xlat: 'dc=domain,dc=com'<br>
radius_xlat: '(uid=itf-toshiba-asd$)'<br>
rlm_ldap: ldap_get_conn: Checking Id: 0<br>
rlm_ldap: ldap_get_conn: Got Id: 0<br>
rlm_ldap: performing search in dc=domain,dc=com, with filter
(uid=itf-toshiba-asd$)<br>
rlm_ldap: ldap_release_conn: Release Id: 0<br>
radius_xlat:
'(&(objectClass=posixGroup)(memberUid=itf-toshiba-asd$))'<br>
rlm_ldap: ldap_get_conn: Checking Id: 0<br>
rlm_ldap: ldap_get_conn: Got Id: 0<br>
rlm_ldap: performing search in dc=domain,dc=com, with filter
(&(cn=wireless)(&(objectClass=posixGroup)(memberUid=itf-toshiba-asd$)))<br>
rlm_ldap::ldap_groupcmp: User found in group wireless<br>
rlm_ldap: ldap_release_conn: Release Id: 0<br>
modcall[authorize]: module "files" returns notfound for request 2<br>
rlm_ldap: - authorize<br>
rlm_ldap: performing user authorization for itf-toshiba-asd$<br>
radius_xlat: '(uid=itf-toshiba-asd$)'<br>
radius_xlat: 'dc=domain,dc=com'<br>
rlm_ldap: ldap_get_conn: Checking Id: 0<br>
rlm_ldap: ldap_get_conn: Got Id: 0<br>
rlm_ldap: performing search in dc=domain,dc=com, with filter
(uid=itf-toshiba-asd$)<br>
rlm_ldap: checking if remote access for itf-toshiba-asd$ is allowed by
uid<br>
rlm_ldap: looking for check items in directory...<br>
rlm_ldap: Adding sambaAcctFlags as SMB-Account-CTRL-TEXT, value
[W ] & op=21<br>
rlm_ldap: Adding sambaNTPassword as NT-Password, value
78389E5DE0CCA3A288568FADB746063D & op=21<br>
rlm_ldap: looking for reply items in directory...<br>
rlm_ldap: user itf-toshiba-asd$ authorized to use remote access<br>
rlm_ldap: ldap_release_conn: Release Id: 0<br>
modcall[authorize]: module "ldap" returns ok for request 2<br>
modcall: leaving group authorize (returns updated) for request 2<br>
rad_check_password: Found Auth-Type EAP<br>
auth: type "EAP"<br>
Processing the authenticate section of radiusd.conf<br>
modcall: entering group authenticate for request 2<br>
rlm_eap: Identity does not match User-Name, setting from EAP Identity.<br>
rlm_eap: Failed in handler<br>
modcall[authenticate]: module "eap" returns invalid for request 2<br>
modcall: leaving group authenticate (returns invalid) for request 2<br>
auth: Failed to validate the user.<br>
Delaying request 2 for 1 seconds<br>
<br>
<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a> wrote:
<blockquote cite="mid:20070706144846.GC19106@lboro.ac.uk" type="cite">
<pre wrap="">Hi,
</pre>
<blockquote type="cite">
<pre wrap="">I need machines to be able to authenticate so that when a user who has
never logged onto a computer can, by the machine have an active network
connection and pulling the credentials from the samba-ldap domain. I
have a realm setup to strip the domain/ part of the username which works
fine, but I need to figure out how to add a $ at the end of anything
that tries to connect as uid=host/computername. I'm sure I can figure
out how to strip the host prefix, but can't quit figure out how to add
the $ to the end. Thanks.
</pre>
</blockquote>
<pre wrap=""><!---->
use the link on the novell site as per the discussions earlier today.
alan
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
</body>
</html>