On 25/03/11 09:39, Thomas Wunder wrote:
On Thursday 24 March 2011 09:36:28 Phil Mayers wrote:
Please post a full debug. It's not possible to find the real cause of your problem from the snippet. (see attachment)
I am guessing that you're attempting to modify the username; you can't do that, EAP will complain (as you're seeing) Yes, I've tried to modify the username (using a policy which I've invoked as the first item of my authorize blocks in inner-tunnel and default) but since I realized that this doesn't help either I don't do so any more (removed the policy). By the way this was the policy which I have used: strip_off_domain{ if( User-Name =~ /^(.*)\\(.*)/ ){ update request { User-Name := "%{2}" } } }
Apart from this, what can I do have rlm_mschap cope with the domain prefix?
Use %{mschap:User-Name} everywhere; this will give the bare username (and also correctly translate host/name.domain.com, if you later do machine auth)