<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><div><div>Same thing unfortunately…</div><div><br></div><div>Users file</div><div><div>DEFAULT <span class="Apple-tab-span" style="white-space:pre"> </span>User-Name =~ ".*\\.xnet\\.co\\.nz$" </div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Auth-Type := Accept,</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Pool-Name := un-auth,</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Service-Type = Framed-User,</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Framed-Protocol = PPP,</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Cisco-Avpair += "ip:vrf-id=Suspended",</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Cisco-Avpair += "ip:ip-unnumbered=Loopback 1000",</div></div><div><br></div><div><br></div><div><div>root@radius01-new:~# radtest barry@adsl.xnet.co.nz password localhost:1812 1812 testing123</div><div>Sending Access-Request of id 77 to 127.0.0.1 port 1812</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Name = "barry@adsl.xnet.co.nz"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Password = "password"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-IP-Address = 120.136.0.21</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Port = 1812</div><div>rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=77, length=20</div></div><div><br></div><div>Debug</div><div><br></div><div><div>Ready to process requests.</div><div>rad_recv: Access-Request packet from host 127.0.0.1 port 48547, id=77, length=73</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Name = "barry@adsl.xnet.co.nz"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Password = "password"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-IP-Address = 120.136.0.21</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Port = 1812</div><div>+- entering group authorize {...}</div><div>++[preprocess] returns ok</div><div>[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.</div><div>++[pap] returns noop</div><div>++[chap] returns noop</div><div>++[mschap] returns noop</div><div>[suffix] Looking up realm "adsl.xnet.co.nz" for User-Name = "barry@adsl.xnet.co.nz"</div><div>[suffix] Found realm "DEFAULT"</div><div>[suffix] Adding Realm = "DEFAULT"</div><div>[suffix] Authentication realm is LOCAL.</div><div>++[suffix] returns ok</div><div>[eap] No EAP-Message, not doing EAP</div><div>++[eap] returns noop</div><div>++[unix] returns notfound</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>expand: %{User-Name} -> barry@adsl.xnet.co.nz</div><div>[files] users: Matched entry DEFAULT at line 236</div><div>++[files] returns ok</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>expand: %{User-Name} -> barry@adsl.xnet.co.nz</div><div>[sql] sql_set_user escaped user --> 'barry@adsl.xnet.co.nz'</div><div>rlm_sql (sql): Reserving sql socket id: 3</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'barry@adsl.xnet.co.nz' ORDER BY id</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'barry@adsl.xnet.co.nz' ORDER BY priority</div><div>rlm_sql (sql): Released sql socket id: 3</div><div>[sql] User barry@adsl.xnet.co.nz not found</div><div>++[sql] returns notfound</div><div>++[expiration] returns noop</div><div>++[logintime] returns noop</div><div>No authenticate method (Auth-Type) configuration found for the request: Rejecting the user</div><div>Failed to authenticate the user.</div><div>Login incorrect: [barry@adsl.xnet.co.nz/password] (from client localhost port 1812)</div><div>Using Post-Auth-Type Reject</div><div>+- entering group REJECT {...}</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>expand: %{User-Name} -> barry@adsl.xnet.co.nz</div><div> attr_filter: Matched entry DEFAULT at line 11</div><div>++[attr_filter.access_reject] returns updated</div><div>Delaying reject of request 1 for 1 seconds</div><div>Going to the next request</div><div>Waking up in 0.9 seconds.</div><div>Sending delayed reject for request 1</div><div>Sending Access-Reject of id 77 to 127.0.0.1 port 48547</div><div>Waking up in 4.9 seconds.</div><div>Cleaning up request 1 ID 77 with timestamp +34</div><div>Ready to process requests.</div><div><br></div></div><div>Thanks</div><div>Barry</div><div><br></div><div><br></div><div><div><div><span class="Apple-style-span" style="font-size: 15px; font-family: Calibri; "><span style="font-weight:bold">From: </span> Arran Cudbard-Bell <<a href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</a>></span></div></div></div></div></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">Reply-To: </span> FreeRadius users mailing list <<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br><span style="font-weight:bold">Date: </span> Fri, 26 Aug 2011 11:26:52 +0200<br><span style="font-weight:bold">To: </span> FreeRadius users mailing list <<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br><span style="font-weight:bold">Subject: </span> Re: authenticate realm no matter what username is<br></div><div><br></div><div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 26 Aug 2011, at 11:16, Barry Murphy wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><div><div>Hey guys,</div><div><br></div><div>We're an ISP providing ADSL services ourselves and on behalf of our wholesalers. I have a bunch of realms that are LOCAL and proxied which work with no issues. I'm trying to add realms of competitors to our radius so when customers are migrated from our competitors to our network they get authenticated and I drop them into a VRF displaying to them they need to change their login details. I've already got the VRF working, the forwarder page etc, I just can't seem to get users to authenticate with a wildcard <a href="mailto:*@dsl.competitor.co.nz">*@dsl.competitor.co.nz</a></div></div></div><div><br></div><div>I have tried the following varies in users file…</div><div><br></div><div><div>DEFAULT <span class="Apple-tab-span" style="white-space:pre"> </span>User-Name =~ "~*\\.xnet\\.co\\.nz$" </div><div><br></div></div></div></blockquote><div><br></div><div>Surely you want </div><div><br></div><div>User-Name =~ ".*\\.xnet\\.co\\.nz$" ?</div></div><br><div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-family: Helvetica; font-size: medium; "><div>Arran Cudbard-Bell</div><div><a href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</a></div><div><br></div><div>RADIUS - Half the complexity of Diameter</div></div></div><br></div></div>-
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></span></body></html>