On 03/07/2013 18:17, Júlíus Þór Bess Ríkharðsson wrote:
On 03/07/13 16:24, Júlíus Þór Bess Ríkharðsson wrote:
Hi,
For some reason I cannot get Stripped-User-Name attribute to get populated when using nostrip for a realm. Is this normal behaviour or am I missing something?
Normal. "nostrip" means "don't populate Stripped-User-Name"
Phil: When I unset nostrip the User-Name attribute gets stripped. So it made sense to me that nostrip would apply to User-Name but would still give the option of Stripped-User-Name.
I don't understand this. The source code is pretty clear: https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/src/modules/rlm_... The "User-Name" attribute isn't touched; a new Stripped-User-Name attribute is used. As I said, request->username is updated, but I'm pretty sure nothing much uses this; I'm sure the EAP "identity == username" check doesn't: https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/src/modules/rlm_... ...explicitly compares to User-Name, not Stripped-User-Name. Have you actually *tried* this, because it should work. If it doesn't, it's likely a problem in your local config.