<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-15">
<META content="MSHTML 6.00.6001.18248" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>Hello All,</DIV>
<DIV>I'm new to the list so please excuse any obvious exclusions.</DIV>
<DIV> </DIV>
<DIV>I have setup free radius to authenticate against our ldap directory and this works fine until I try to use the windows login and password instead of being prompted for one. It puts the prefix of either the workstation name or the domain name in front. How do I strip these out? My ldap configuration is below and tls is configured and working I just left it out. Freeradius 2 on SUSE.</DIV>
<DIV>Thanks.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>ldap {<BR> #<BR> # Note that this needs to match the name in the LDAP<BR> # server certificate, if you're using ldaps.<BR> server = "ldap-server"<BR> identity = "cn=admin,o=wcc"<BR> password = sfasdf<BR> basedn = "ou=users,o=wcc"<BR> filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"<BR> #base_filter = "(objectclass=radiusprofile)"</DIV>
<DIV> </DIV>
<DIV> # How many connections to keep open to the LDAP server.<BR> # This saves time over opening a new LDAP socket for<BR> # every authentication request.<BR> ldap_connections_number = 5</DIV>
<DIV> </DIV>
<DIV> # seconds to wait for LDAP query to finish. default: 20<BR> timeout = 4</DIV>
<DIV> </DIV>
<DIV> # seconds LDAP server has to process the query (server-side<BR> # time limit). default: 20<BR> #<BR> # LDAP_OPT_TIMELIMIT is set to this value.<BR> timelimit = 3</DIV>
<DIV> </DIV>
<DIV> #<BR> # seconds to wait for response of the server. (network<BR> # failures) default: 10<BR> #<BR> # LDAP_OPT_NETWORK_TIMEOUT is set to this value.<BR> net_timeout = 1</DIV>
<DIV> </DIV>
<DIV> #<BR> # This subsection configures the tls related items<BR> # that control how FreeRADIUS connects to an LDAP<BR> # server. It contains all of the "tls_*" configuration<BR> # entries used in older versions of FreeRADIUS. Those<BR> # configuration entries can still be used, but we recommend<BR> # using these.<BR> #</DIV>
<DIV> </DIV>
<DIV> </DIV><STRONG>
<HR>
Christopher Shields</STRONG> <EM>Network Support Services Manager</EM> 630.466.5732 <A href="mailto:cshields@waubonsee.edu"><FONT face=Tahoma size=2>cshields@waubonsee.edu</FONT></A> </BODY></HTML>