Hi.

I’m trying to match a suffix in the username using the hints file and strip the suffix.

I have the following configured:

raddb/hints:

DEFAULT Suffix == ".d”, Strip-User-Name = Yes

        Hint = "Dynamic"

raddb/users:

DEFAULT Hint == "Dynamic"

        Framed-IP-Address := 255.255.255.254,

        Fall-Through = Yes

user    Cleartext-Password := "password"

        Service-Type = Framed-User,

        Framed-IP-Address = XXX.XXX.XXX.XXX,

        Framed-Protocol = PPP,

        Framed-Routing = None,

        Session-Timeout = 604800,

        Idle-Timeout = 86400,

        Framed-MTU = 1500,

        Framed-Compression = Van-Jacobsen-TCP-IP

When run radiusd –W I can see it enter the preprocess module and match an entry, but the suffix is not being stripped and entry in users file not being matched:

Tue Jun  3 12:54:15 2008 : Debug: +- entering group authorize

Tue Jun  3 12:54:15 2008 : Debug:   modsingle[authorize]: calling suffix (rlm_realm) for request 0

Tue Jun  3 12:54:15 2008 : Debug:     rlm_realm: No '@' in User-Name = "user.d", looking up realm NULL

Tue Jun  3 12:54:15 2008 : Debug:     rlm_realm: No such realm "NULL"

Tue Jun  3 12:54:15 2008 : Debug:   modsingle[authorize]: returned from suffix (rlm_realm) for request 0

Tue Jun  3 12:54:15 2008 : Debug: ++[suffix] returns noop

Tue Jun  3 12:54:15 2008 : Debug:   modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0

Tue Jun  3 12:54:15 2008 : Debug:   hints: Matched DEFAULT at 79

Tue Jun  3 12:54:15 2008 : Debug:   modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0

Tue Jun  3 12:54:15 2008 : Debug: ++[preprocess] returns ok

Tue Jun  3 12:54:15 2008 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user

Tue Jun  3 12:54:15 2008 : Debug: auth: Failed to validate the user.

Tue Jun  3 12:54:15 2008 : Auth: Login incorrect: [user.d/password] (from client ERX-LAB port 2152726802 cli #ERX01.OTWODDS#BLC01.OTW23DS atm 3/1:0.35#)

Tue Jun  3 12:54:15 2008 : Debug:   Found Post-Auth-Type Reject

Tue Jun  3 12:54:15 2008 : Debug: +- entering group REJECT

Tue Jun  3 12:54:15 2008 : Debug:   modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter) for request 0

Tue Jun  3 12:54:15 2008 : Debug:       expand: %{User-Name} -> user.d

Tue Jun  3 12:54:15 2008 : Debug:  attr_filter: Matched entry DEFAULT at line 11

Tue Jun  3 12:54:15 2008 : Debug:   modsingle[post-auth]: returned from attr_filter.access_reject (rlm_attr_filter) for request 0

Tue Jun  3 12:54:15 2008 : Debug: ++[attr_filter.access_reject] returns updated

Tue Jun  3 12:54:15 2008 : Debug: Delaying reject of request 0 for 1 seconds

Tue Jun  3 12:54:15 2008 : Debug: Going to the next request

Tue Jun  3 12:54:15 2008 : Debug: Waking up in 0.9 seconds.

Tue Jun  3 12:54:16 2008 : Debug: Sending delayed reject for request 0

Tue Jun  3 12:54:16 2008 : Debug: Waking up in 4.9 seconds.

Tue Jun  3 12:54:21 2008 : Debug: Cleaning up request 0 ID 5 with timestamp +79

Tue Jun  3 12:54:21 2008 : Debug: Ready to process requests.

Any ideas ?

I’m running FreeRADIUS 2.0.3.

Thanx

Paul