For some reason, when we run a query against radius and the username starts with a slash, it seems to ignore the slash. As a result, a user is able to log in with both "bob" and "/bob", although only one is right. Any ideas what could be the cause of this? Thanks! Chris Sigler
On Thu, Jun 16, 2005 at 04:51:53PM -0500, Chris Sigler wrote:
For some reason, when we run a query against radius and the username starts with a slash, it seems to ignore the slash.
As a result, a user is able to log in with both "bob" and "/bob", although only one is right. Any ideas what could be the cause of this?
Check if you've got a realm module in preprocess which is set to use '/' as the delimiter. I think the default config does... -- Paul "TBBle" Hampson, on an alternate email client.
We're using mysql to authenticate... Sorry, I guess I should have mentioned that. If I'm not mistaken, this won't apply...
Check if you've got a realm module in preprocess which is set to use '/' as the delimiter. I think the default config does...
-- Paul "TBBle" Hampson, on an alternate email client.
On Thu, Jun 16, 2005 at 08:15:32PM -0500, Chris Sigler wrote:
We're using mysql to authenticate... Sorry, I guess I should have mentioned that. If I'm not mistaken, this won't apply...
Nope. Using rlm_sql has no bearing on which preprocess modules are run (unless you've got a very very strange setup... I can't even imagine the fail-over stanzas needed to do that). Otherwise, realms and proxying would be impossible when using rlm_sql to authorise. -- Paul "TBBle" Hampson, on an alternate email client.
Okay, checked into it, and we don't use a / as a delimiter at any point that we can find. -Chris On 6/17/05, Paul Hampson <Paul.Hampson@pobox.com> wrote:
Nope. Using rlm_sql has no bearing on which preprocess modules are run (unless you've got a very very strange setup... I can't even imagine the fail-over stanzas needed to do that).
Otherwise, realms and proxying would be impossible when using rlm_sql to authorise.
On Fri, Jun 17, 2005 at 10:00:16AM -0500, Chris Sigler wrote:
Okay, checked into it, and we don't use a / as a delimiter at any point that we can find.
In that case, freeradius -X and see if you can spot where it's happening. -- Paul "TBBle" Hampson, on an alternate email client.
participants (2)
-
Chris Sigler -
Paul.Hampson＠PObox.com