On Sun, Jun 26, 2016 at 05:11:55PM -0400, Trevor Jennings wrote:
Which I assume means if Stripped-User-Name is null, then use mschap:User-Name?
Yes
I do not understand what I would need to do to achieve this. Would I need to set 'nostrip' under the realm for the domain of that user authenticating?
I would use unlang to see if the User-Name matches "^host/", and if so call a different instantiation of mschap configured for machine auth instead, rather than trying to configure one instance of mschap to magically work with both. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>