Hi, I am successfully using the hints file to manipulate the User-Name of a subset of users by matching on their realm name. The hints file allows be to drop these User-Names back to a single common name and to authorize with. What I want to be able to do now, is to store a copy of the original User-Name value in a varible so that I can subsiquently use this in the postauth SQL logging and record the original value rather than the value altered by hints. What would be the best way of doing this? I just want to drop the value into a tempory varible really. Kind Regards Ben
Hi,
I am successfully using the hints file to manipulate the User-Name of a subset of users by matching on their realm name. The hints file allows be to drop these User-Names back to a single common name and to authorize with.
Stripped-User-Name is the variable you want to play with. you're fortunate to be able to mangle the User-Name - for with many EAP methods, if the returned/proxied User-Name doesnt match the original, then it will fail the connection. alan
Hi, Sorry, I probably was not clear enough: Its all working as I want: User-Name username@realm.net Password=something Is processed correctly by hints to: User-Name realm.net Password=common But.... What I want to log in postauth SQL is the original username: username@realm.net Not simply the processed value showig the realm so NOT: realm.net Why? Because this radius server is claiffyig users into group to be tunneled on a LTS to another LNS for PPP termination and ultimate authorisation. But I would like to be able to check the SQL log for the LTS and see in post auth that we are receiving connection for the specific usernames - helps with support. Kind Regards Ben ----- Original Message ----- From: <A.L.M.Buxey@lboro.ac.uk> To: "Ben Butler" <freeradius@dfa.me.uk>; "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Friday, March 02, 2007 11:47 AM Subject: Re: Tempory Varibles Hi,
I am successfully using the hints file to manipulate the User-Name of a subset of users by matching on their realm name. The hints file allows be to drop these User-Names back to a single common name and to authorize with.
Stripped-User-Name is the variable you want to play with. you're fortunate to be able to mangle the User-Name - for with many EAP methods, if the returned/proxied User-Name doesnt match the original, then it will fail the connection. alan
Hi all.. inside of /usr/local/etc/raddb/dictionary we found the line : $INCLUDE /usr/local/share/freeradius/dictionary inside of /usr/local/share/freeradius/dictionary.. there are many $INCLUDE that call all dictionary.xxx Seems that we are not using all the hardware platform listed at /usr/local/share/freeradius, can we put hash / # in front of the $INCLUDE that we not used ? such as 3COM, Cisco, etc ? I believe there will be more memory used if we call all of the dictionaries compare to the necessaries only. TIA PD
PD wrote:
Seems that we are not using all the hardware platform listed at /usr/local/share/freeradius, can we put hash / # in front of the $INCLUDE that we not used ? such as 3COM, Cisco, etc ?
Yes.
I believe there will be more memory used if we call all of the dictionaries compare to the necessaries only.
Maybe a megabyte or so. It shouldn't be a problem on modern machines. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Ben Butler -
PD