On 27/09/12 17:06, Tony Peña wrote:
i put the hint file more below after radiusd -X.. check again please... i miss policyfilter... i send again both.
/etc/freeradius/hints
DEFAULT Suffix == "@my.domain.cu", Strip-User-Name
Don't do this. It doesn't work reliably, because you modify the username, which breaks some things. Stop using the hints file, and instead do something like this: authorize { ... if (User-Name =~ /^(.+)@my.domain.co/) { update request { Stripped-User-Name := "%{1}" } } ... } As Alan has pointed out, you can also do this with the "realm" module: authorize { ... suffix ... } ...but to do that, you ALSO need to edit proxy.conf and define a fake local realm. Personally I find this confusing and like to separate proxy realms from username realms.