2011/11/10 Alan Buxey
<A.L.M.Buxey@lboro.ac.uk>
Hi,
> rad_recv: Access-Request packet from host 172.20.40.11 port 1025, id=21, length=218
<snip>
> User-Name = "OPTARE\\brouco"
I know this, thats why i need try to remove this prefix. At first i thought i could do with module/realm. But I didnt get good results.
<snip>
all okay....but then:
> # Executing section authorize from file /etc/freeradius/sites-enabled/default
> +- entering group authorize {...}
> ++[preprocess] returns ok
> ++[mschap] returns noop
> ++[digest] returns noop
> [ldap] performing user authorization for brouco
> [ldap] expand: %{Stripped-User-Name} ->
no stripped-user-name
I think the problem is eap is looking for User-name and i need it looks for stripped....
and User-Name is brouco - but thats not what the client sent. they sent OPTARE\\brouco -
so your reply reference something they didnt send.
have you got 'ntdomain' module enabled in your virtual servers - just after the 'preprocess'
is called?
alan
Regards,
Alejandro