On Thursday 24 March 2011 09:36:28 Phil Mayers wrote:
Please post a full debug. It's not possible to find the real cause of your problem from the snippet. (see attachment)
I am guessing that you're attempting to modify the username; you can't do that, EAP will complain (as you're seeing) Yes, I've tried to modify the username (using a policy which I've invoked as the first item of my authorize blocks in inner-tunnel and default) but since I realized that this doesn't help either I don't do so any more (removed the policy). By the way this was the policy which I have used: strip_off_domain{ if( User-Name =~ /^(.*)\\(.*)/ ){ update request { User-Name := "%{2}" } } }
Apart from this, what can I do have rlm_mschap cope with the domain prefix? Thanks in advance!