Hello, New user making good progress. Can see light at end of tunnel. I need to be able to only store the username without realm in the MySQL radcheck table. In the sql.conf file, I have tried commenting out the following: #sql_user_name = "%{User-Name}" ...and un-commenting the following: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}" ...and it does not work. But, if I put the username with realm in the radcheck table, then it works. I also uncommented the following in the sql.conf file: default_user_profile = "DEFAULT" Cliff
Thanks. That was it! -----Original Message----- From: freeradius-users-bounces+chayes=afo.net@lists.freeradius.org [mailto:freeradius-users-bounces+chayes=afo.net@lists.freeradius.org]On Behalf Of Alan DeKok Sent: Tuesday, June 13, 2006 11:52 AM To: FreeRadius users mailing list Subject: Re: Stripped username "Cliff Hayes" <chayes@afo.net> wrote:
I need to be able to only store the username without realm in the MySQL radcheck table.
To do that, you need to configure a realm, or a DEFAULT realm, so that the username will be stripped before it gets to SQL. Alan Dekok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan, I thought I had this working, but it's not after all. I forgot to change radcheck back to the username only (no realm). When I did that, I could no longer authenticate. I added the following to the realms file per your suggestion: realm afotest.net { type = radius authost = LOCAL accthost = LOCAL } I tried using both of the following (one at a time) in the radiusd.conf file: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}" sql_user_name = "%{User-Name}" FreeRADIUS sees the request, but still gives "Login incorrect" Cliff -----Original Message----- From: freeradius-users-bounces+chayes=afo.net@lists.freeradius.org [mailto:freeradius-users-bounces+chayes=afo.net@lists.freeradius.org]On Behalf Of Alan DeKok Sent: Tuesday, June 13, 2006 11:52 AM To: FreeRadius users mailing list Subject: Re: Stripped username "Cliff Hayes" <chayes@afo.net> wrote:
I need to be able to only store the username without realm in the MySQL radcheck table.
To do that, you need to configure a realm, or a DEFAULT realm, so that the username will be stripped before it gets to SQL. Alan Dekok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Cliff Hayes wrote: realm afotest.net { type = radius authost = LOCAL accthost = LOCAL # ADD THIS strip }
I tried using both of the following (one at a time) in the radiusd.conf file:
sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}"
Stripped-User-Name is only available if the realm is a stripping realm.
participants (3)
-
Alan DeKok -
Cliff Hayes -
Phil Mayers