-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 29.01.2014 18:02, Arran Cudbard-Bell wrote:
Please just use -X, the extra info isn't useful.. OK, next time I will know.
There's a policy filter_username which does basic checks on incoming user names to make sure they look like NAIs.
if (User-Name != "%{tolower:%{User-Name}}") { reject }
Is the bit causing the trouble. Comment it out in filter_username, or comment out the call to filter_username, it's got nothing to do with the users file...
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team I think that makes EAP-TLS less obvious to set up. Especially if you are using full user name as CN. I'll try that later. May I propose adding info about those Capital Letters disallowed into text?
# This is an entry for a user with a space in their name. # Note the double quotes surrounding the name. If you have # users with spaces and capital letters in their names, you must also change # the "filter_username" policy to allow spaces and capital letters. - -- Pozdrawiam, Maciej Milewski -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlLpencACgkQPQ1pa2ELkNly1QCeOo0b6+Qg2XFdL2utcd+DEdvy i+YAn1suA+gzC/CbV3f4OctZ4g1eyxy4 =8iIn -----END PGP SIGNATURE-----