On 05/23/2011 08:46 PM, Alexandros Gougousoudis wrote:
Hi Phil, filter =
"(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(uid=%{%{Stripped-User-Name}:-%{User-Name}}\$))"
Don't do that. Instead try:
filter = "(uid=%{mschap:User-Name})"
Hm, this is not working. I also don't get the point, why the username in mschap is mangled to have a $ or not?
The expansion %{mschap:User-Name} will expand as follows: username -> username DOMAIN\username -> username host/name.domain.com -> name$ ...which is correct in the cases people care about, and is the quickest and cleanest way to handle the various forms of usernames that windows sends (On that note: it does not handle user@domain.com. It probably should...)
The Windows-Worstation query their name as "host/workstation", which is workstation$ in my ldap. My Users are coming in as "user", so where else doing the lookup than in ldap module?
The %{mschap:User-Name} module is available anywhere, as long as the mschap module is instantiated. The request doesn't even have to be mschap - it gives back a modified version of the username. If the "$" still isn't getting into the LDAP query, it might be something inside the LDAP module.