Okay,this morning i was happy that the xlat functions works now well and changes host/Name to Name$ for example. The String host/Mane is only given if a machine authenticates with the machine certificate. In my setup first the computer authenticates and the after logon to the domain the user authenticates again with his own certificate. This time the mxchap function only changes Usernames which have host/ at the beginning but not Usernames from the User Certifikates which comes as "Username" only without host/ at the beginning. How can I add a $ at the end of this Username? Any idea? Thanks Armin -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+kraemer.armin=web.de@lists.freeradius.org [mailto:freeradius-users-bounces+kraemer.armin=web.de@lists.freeradius.org] Im Auftrag von Krämer Armin Gesendet: Dienstag, 25. Juli 2006 12:36 An: 'FreeRadius users mailing list' Betreff: AW: AW: Since 2 Month noone any idea how to do this ?Stripping Username Question *important* Okay, thanks now it works quite well with the mschap module :-) -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+kraemer.armin=web.de@lists.freeradius.org [mailto:freeradius-users-bounces+kraemer.armin=web.de@lists.freeradius.org] Im Auftrag von Phil Mayers Gesendet: Montag, 24. Juli 2006 12:28 An: FreeRadius users mailing list Betreff: Re: AW: Since 2 Month noone any idea how to do this ? Stripping Username Question *important* James J J Hooper wrote:
In your LDAP section of radiusd.conf, replace this: %{Stripped-User-Name:-%{User-Name}} with this: %{Stripped-User-Name:-%{mschap:User-Name}}
Regards, James
Sorry, what i suggested may only work in the mschap section, not in the LDAP bit... :(
No, it should work anywhere, but he does need to have the mschap module configured, and I think it needs to be *before* the ldap module in authorize. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html