Hi,
I am not sure why, I inherited this setup and I am still trying to understand it. The LDAP server is eDirectory (FreeRADIUS compiled with -with-edir)
The "-X" output says:
WARNING: Deprecated conditional expansion ":-". See "man unlang" for details expand: (cn=%{Stripped-User-Name:-%{User-Name}}) -> (cn=user) expand: o=uol -> o=uol
What is the replacement for ":-" given I don't know what it did in the first place for "man unlang" to be any help!
if Stripped-User-Name exists, then use that, otherwise use User-Name the :- operator is in unlang too - but the expansion check may need to be rewritten - eg %{%{Stripped-User-Name}:-%{User-Name}} its only deprecated right now - not too essential
2) Rejecting a user
I have a specific user account (call it "special") it was barred using:
special Auth-Type := Reject Reply-Message = "Cannot use this user account"
in the users file.
Variants like " special", "Special" and "SPECIAL" etc get by this check, and out LDAP server allows them!, so I added:
lower_user = before lower_pass = no nospace_user = before nospace_pass = no
to radius.conf. These no longer seem to work. How do you achieve this with version 2.0.0?
gosh. a lot of ways of doing this.... you could use the unlang method to check....eg if (%User-Name ~= /^special$/i ) etc etc etc or via the attrib filter rewrite alan