PEAP/MS-CHAPv2 and the Windows XP default wireless client
FreeRADIUS Version 1.1.3-r0.1.2 (Upgrade is Pending) I have all of my Cisco AP1231's set to do PEAP/MS_Chapv2 authentication and would like to allow users that wish to use the default windows wireless client to send their windows login and password to the RADIUS server by default. The problem I am having is that the supplicant(s) are sending their fully qualified username in the following manner. User-Name = "ComputerName\\Username" User-Password = "Password" FreeRADIUS expects the request(s) like this. User-Name = "Username" User-Password = "Password" How do I get FreeRADIUS to ignore the \\ComputerName prefix? Thanks in advance, Terry Pelley Network Analyst Business and Learning Technologies Ottawa-Carleton District School Board terry.pelley@ocdsb.ca
Hi,
User-Name = "ComputerName\\Username" User-Password = "Password"
FreeRADIUS expects the request(s) like this.
User-Name = "Username" User-Password = "Password"
How do I get FreeRADIUS to ignore the \\ComputerName prefix?
use the prefix module etc - and use Stripped-User-Name from the mschap to do the check...you could also do some attr_rewrite magic to copy the username to stripped-user-name then regexp it. if you upgrade to the latest 1.1.7 codebase then the mschap very happily handles this and all you need to look at is %{mschap:User-Name} you will get further problems if they've also put their system into another domain or workgroup...as that will then impinge on %{mschap:NT-domain} - which you'll need to change or ignore if its not your required one alan
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Terry Pelley