in the /etc/raddb/modules/realm, the windows domain prefix \\ does not seem to work. It still get proxy to the NULL realm. But if i use user!@H1 it is proxy correctly to H1 realm and not NULL realm. Can advise anything i missed out in the proxy.conf or radiusd.conf? *in the radius -X debug, H1\user1 does not get to proxy to H1 realm* User-Name = "H1\\user1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "H1\user1", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "H1\user1" [suffix] Adding Realm = "NULL" [suffix] Proxying request from user H1\user1 to realm NULL [suffix] Preparing to proxy authentication request to realm "NULL" *In the proxy.conf * realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 } *user1@H1 get proxy correct to H1 realm. * User-Name = "user1@H1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "H1" for User-Name = "user1@H1" [suffix] Found realm "H1" [suffix] Adding Realm = "H1" [suffix] Proxying request from user wlanH1 to realm H1 [suffix] Preparing to proxy authentication request to realm "H1" On Wed, Dec 16, 2009 at 7:06 AM, green green <gggreen4@gmail.com> wrote:
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
please advise and thanks.