problem is, that we are a university, so they are &quot;our&quot; people. tousands of students and teachers. if we deny those users, our helpdesk will get more work.<div><br></div><div>is there a way to remove the double entries or do i have to block those?</div>
<div><br></div><div>-euroreg<br><br><div class="gmail_quote">On Wed, Oct 7, 2009 at 1:50 PM, Alan Buxey <span dir="ltr">&lt;<a href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi,<br>
<div class="im"><br>
&gt; we do have one realm configured <a href="http://domainname.com" target="_blank">domainname.com</a> which works perfectly. every<br>
&gt; user who wants to authenticate with a different realm is proxied to an<br>
&gt; outside radius. server. the setup works fine.<br>
&gt;<br>
&gt; we do have some mobile devices who send something like:<br>
&gt; <a href="mailto:username@company.com">username@company.com</a>@<a href="http://wlan.mnc003.mc" target="_blank">wlan.mnc003.mc</a><br>
&gt; <a href="mailto:username@company.com">username@company.com</a>@Verisign...<br>
<br>
</div>as Stefan says - this looks suspiciously like Nokia Symbian clients.<br>
if the client hasnt been configured correctly it will send the CN<br>
of the certificate as the realm details...and other things - so you get<br>
that double realm issue... which might get to you via external proxy..<br>
or might not.<br>
<br>
reject if you see more than one @ - or, if these are your people,<br>
find them and fix their client. (in case of Nokia, its ensure that the<br>
realm is specified rather than left to default setting.<br>
<font color="#888888"><br>
alan<br>
</font><div><div></div><div class="h5">-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br></div>