Hi, I try to configure my proxy freeradius. The problem is that i have a "@" caracter in my username and i think that freeradi us interpret the realm after the @ caracter. But it's not the realm because i have a @ in the username. fr.wifimetropolis.com is my realm and alexandre.lai@idcware.com is my username. I would like send my requet in this format for exemple : fr.wifimetropolis.com/alexandre.lai@idcware.com but i test with radtest command, it's didn't work. Regards Cordialement, Jonathan Khattir Technicien Support Nomosphere jkhattir@nomosphere.fr
Maybe use "at" or "." instead @ ? -----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org] On Behalf Of Jonathan KHATTIR Sent: Thursday, January 02, 2014 8:24 PM To: freeradius-users@lists.freeradius.org Subject: realm and @ in username Hi, I try to configure my proxy freeradius. The problem is that i have a "@" caracter in my username and i think that freeradi us interpret the realm after the @ caracter. But it's not the realm because i have a @ in the username. fr.wifimetropolis.com is my realm and alexandre.lai@idcware.com is my username. I would like send my requet in this format for exemple : fr.wifimetropolis.com/alexandre.lai@idcware.com but i test with radtest command, it's didn't work. Regards Cordialement, Jonathan Khattir Technicien Support Nomosphere jkhattir@nomosphere.fr - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jonathan KHAT writes:
I try to configure my proxy freeradius.
The problem is that i have a "@" caracter in my username and i think that freeradi us interpret the realm after the @ caracter. But it's not the realm because i have a @ in the username.
fr.wifimetropolis.com is my realm and alexandre.lai@idcware.com is my username. I would like send my requet in this format for exemple : fr.wifimetropolis.com/alexandre.lai@idcware.com but i test with radtest command, it's didn't work.
Do not run the "suffix" instance of rlm_realm then, only run the "prefix" instance. FWIW your realm format is not very sustainable going forward. As you come to integrate with other IDPs, they are very likely to use realms as per the default rlm_realm "suffix" configuration. If you must have stacks of AAA realms, better to just stack them up as if they were subdomains and have the home server know where to chop them based on the realms it honors. -- Brian
Jonathan KHATTIR wrote:
The problem is that i have a "@" caracter in my username and i think that freeradi us interpret the realm after the @ caracter. But it's not the realm because i have a @ in the username.
I think you don't understand realms. The realm *is* the piece after the @. See RFC 4282.
fr.wifimetropolis.com is my realm and alexandre.lai@idcware.com is my username.
Perhaps you could try using different words. You've already re-defined "realm". So I have no idea what you mean. Instead, explain what you have, and what you want. Don't use the word "realm".
I would like send my requet in this format for exemple : fr.wifimetropolis.com/alexandre.lai@idcware.com but i test with radtest command, it's didn't work.
<sigh> See the FAQ for "it doesn't work". Alan DeKok.
Hi,
I try to configure my proxy freeradius.
The problem is that i have a "@" caracter in my username and i think that freeradi us interpret the realm after the @ caracter. But it's not the realm because i have a @ in the username.
fr.wifimetropolis.com is my realm and alexandre.lai@idcware.com is my username. I would like send my requet in this format for exemple : fr.wifimetropolis.com/alexandre.lai@idcware.com but i test with radtest command, it's didn't work.
So your realm separator is "/" and the realm is a prefix to the username. Then you need to tell FreeRADIUS that this is how you want it. Using "@" and suffix notation is merely a default, not the only choice. The "realm" module can be configured for that. Most people use its "suffix" instance which is @ and suffix. If you want / and prefix, you would use the realm IPASS instance: From mods-available/realm: realm IPASS { format = prefix delimiter = "/" } Greetings, Stefan Winter P.S.: the @ is the suggested delimiter for internet use, as per RFC4282 and its successor-to-be. You should really consider changing your username to avoid conflicts like that. -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
participants (5)
-
Alan DeKok -
Brian Julin -
Jonathan KHATTIR -
Puzzel -
Stefan Winter