Thank you for the quick reply.

I've tried this solution but the results are not what I expected.

In fact i defined the following realm module:

realm wimax_decorator {

format = prefix

delimiter = "}"

ignore_default = no

ignore_null = no

}

and i make FR to call it during authorize phase.

The client show up with this NAI {am=1}utenteA@nap.com and the module output (from radiusd -X) is the following.

[wimax_decorator] Looking up realm "{am=1" for User-Name = "{am=1}utenteA@nap.com";

[wimax_decorator] Found realm "DEFAULT"

[wimax_decorator] Adding Stripped-User-Name = "utenteA@nap.com";

[wimax_decorator] Adding Realm = "DEFAULT"

[wimax_decorator] Authentication realm is LOCAL.

The problem is that all my subsequent queries suppose the Attribute User-Name to be utenteA@nap.com instead of {am=1}utenteA@nap.com so I keep getting null result set from the Oracle DB since there aren't entries for {am=1}utenteA@nap.com in the DB. A possible solution could be making the sql module to use Stripped-User-Name instead of the User-Name for the queries but I was looking for a solution that doesn't involve the code.

Am i making any mistake above? Any other ideas?

Thank you,

Il giorno 02/dic/08, alle ore 16:28, A.L.M.Buxey@lboro.ac.uk ha scritto:

1) set 'prefix' to be }

with this, anything before and including }
(which may never appear as a realm or username)
would be treated like a NT domain and be stripped
off logically