ntlm_authentication for multiple supplicants
Hello, I've trying to get ntlm_auth to authenticate several supplicants using freeradius 1.1.6, specifically with MacOS and Windows XP SP3, and I've attempting to inspect the contents of variables while doing the ntlm_auth authentication. My ntlm_auth command is: ntlm_auth --request-nt-key --username=%{Stripped-User-Name:-%{User-Name:-%{mschap:User-Name}}} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00} Is there a way to use regular expressions or otherwise to inspect the Stripped-User-Name to adjust which radius attribute is used in the ntlm_auth command, in other words look for a value Stripped-User-Name =~ /^value(.*)$/ and then use, for instance, the %{mschap:User-Name}in its place to authenticate? Is there a better approach? Thanks, John
splintered thoughts wrote:
I've trying to get ntlm_auth to authenticate several supplicants using freeradius 1.1.6,
Upgrade.
Is there a way to use regular expressions or otherwise to inspect the Stripped-User-Name to adjust which radius attribute is used in the ntlm_auth command, in other words look for a value
Stripped-User-Name =~ /^value(.*)$/
and then use, for instance, the %{mschap:User-Name}in its place to authenticate? Is there a better approach?
Upgrade to 2.0.5, and use "unlang" to do conditional checks && regular expression matches. Set an intermediate variable (e.g. Tmp-String-0), and use that in the command-line to ntlm_auth. Alan DeKok.
participants (2)
-
Alan DeKok -
splintered thoughts