G'day mate, thanks for the quick reply. I already have this in my radiusd.conf: realm suffix { format = suffix delimiter = "@" ignore_default = no ignore_null = no } The huntgroups file looks like this: wireless NAS-IP-Address == 127.0.0.1 wireless NAS-IP-Address == localhost.localdomain SQL-Group == 3072BY256 radgroupcheck table: | 8 | netmaster | Huntgroup-Name | == | netmaster | | 6 | 3072BY256 | Huntgroup-Name | == | wireless | | 7 | 3072BY256 | Auth-Type | += | local | | 9 | netmaster | Auth-Type | += | local | All of this is still in a test environment so I am able to change whatever is needed. -- Brad McAllister bmcallister@noc.dls.net On Oct 5, 2006, at 6:13 PM, James Wakefield wrote:
Brad McAllister wrote:
If I removed the huntgroups out of the picture, is works fine. The problem seems to be that the realm is not being stripped off of the username when it checks it against the usergroup table. If more information is needed, please let me know. I would really like to get this working. Thanks! - Brad
Have a look at the realm { } instances and attr_rewrite in http:// wiki.freeradius.org/Radiusd.conf.
If that doesn't sort you out, could you post (with private info obscured, of course) relevant excerpts from your radgroupcheck table and huntgroups file?
Cheers, -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia.
Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: james.wakefield@deakin.edu.au Website: http://www.deakin.edu.au - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html