Re: Re: Authentication Problem with EAP-PEAP
Hi Arran, Thanks for your response. How What can I do to match User-Name attribute and EAP Identity ? Regards, Nicolas.
Le mercredi 23 janvier 2008, debug afone a écrit :
Hi Arran,
Thanks for your response. How What can I do to match User-Name attribute and EAP Identity ?
I am very curious also to know thaht. I have asked a similar question a small amount of time ago, but i was answer that there is a lot of answer about this in the list. I have to say that I have already tried two methods that don't work. One time I have add DEFAULT Realm =="exemple.com", Autz-Type := LDAP User-Name := "%{User-Name}" in the users file. I have obtain 2 user-name, but bad luck, it is the bad one that is use for accounting. I am sorry to say that this problem is not very clear for people that don't have all EAP protocol in mind. I find freeradius very powerful, but it is really easy to do bad things. As I said in my previous email, I have found a lot of configurations published that don't seem to do what people think they are doing. This topic of the outer identity need to be clarified, I believe. It would be very usefull to have a sample of configuration for which the accounting is using the user-name provided by the inner identity. Best regards, -- Thierry CHICH Equipe Réseaux / Rectorat de Clermont-Ferrand Tel: +33 4 73 99 30 54
Sorry. What I said is not related to the thread.
debug afone wrote:
Hi Arran,
Thanks for your response. How What can I do to match User-Name attribute and EAP Identity ?
Regards,
Nicolas.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Don't alter the outer identity. Which version of FreeRadius are you using ? -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900
participants (3)
-
Arran Cudbard-Bell -
debug afone -
Thierry CHICH