21 Jun
2016
21 Jun
'16
10:02 a.m.
Hi,
Like when AD domain is @private.dom.my / PRIVATE and radius will absolutely need this. At the moment having configs constructed of bits from wikis/howtos, both: "me@private.dom.my" and "me" get authenticated.
unlang. in fact, recent releases of the server come with many default policies which will do this sort of check/enforcement for you (because they are useful...eg for eduroam!) either invoke the policy (call it by its name in the virtual server config) or use unlang directly int he authorize section eg if( User-Name !~ /@/ ) { update reply { Reply-Message = "no realm defined" } reject } alan