<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>realm in User-Name stripped in accounting data?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Tahoma">Hi all,</FONT>
</P>
<P><FONT SIZE=2 FACE="Tahoma">We setup proxy (on freeradius 2.1.3) by putting following lines in users and acct_users:</FONT><SPAN LANG="zh-tw"></SPAN>
</P>
<P><SPAN LANG="zh-tw"><FONT SIZE=2 FACE="Tahoma">DEFAULT Huntgroup-Name == Aruba, Aruba-Essid-Name == "Univ WiFi", Realm != "</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">localream.mydomain</FONT></SPAN><SPAN LANG="zh-tw"><FONT SIZE=2 FACE="Tahoma">", Proxy-to-realm := "</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">remoteRealm</FONT></SPAN><SPAN LANG="zh-tw"><FONT SIZE=2 FACE="Tahoma">"</FONT></SPAN></P>
<P><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">Authentication works properly while User-Name in accounting data, the @realm part is removed.</FONT></SPAN>
<BR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">However, there is no problem for other 'simple' proxy settings (only define realm in proxy.conf, without Proxy-to-realm). </FONT></SPAN></P>
<P><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">We're using LDAP as authentication backend.</FONT></SPAN>
</P>
<P><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">Would anyone please advise if we can keep the @realm part in all accounting data?</FONT></SPAN>
</P>
<P><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">Thanks a lot.</FONT></SPAN>
<BR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">/ST Wong</FONT></SPAN>
</P>
</BODY>
</HTML>