in the /etc/raddb/modules/realm, the windows domain prefix \\ does not seem to work. It still get proxy to the NULL realm. But if i use user!@H1 it is proxy correctly to H1 realm and not NULL realm. Can advise anything i missed out in the proxy.conf or radiusd.conf?
in the radius -X debug, H1\user1 does not get to proxy to H1 realm
User-Name = "H1\\user1"
User-Password = "password"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "H1\user1", looking up realm NULL
[suffix] Found realm "NULL"
[suffix] Adding Stripped-User-Name = "H1\user1"
[suffix] Adding Realm = "NULL"
[suffix] Proxying request from user H1\user1 to realm NULL
[suffix] Preparing to proxy authentication request to realm "NULL"
In the proxy.conf
realm H1 {
type = radius
nostrip
authhost = 1.2.3.4:1812
accthost = 1.2.3.4:1813
secret = secret1
retry_delay = 3
retry_count = 1
}
user1@H1 get proxy correct to H1 realm.
User-Name = "user1@H1"
User-Password = "password"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] Looking up realm "H1" for User-Name = "user1@H1"
[suffix] Found realm "H1"
[suffix] Adding Realm = "H1"
[suffix] Proxying request from user wlanH1 to realm H1
[suffix] Preparing to proxy authentication request to realm "H1"
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
please advise and thanks.