Hi all, We have a project trying to integrate pfsense and freeradus together to form a captive portal, not rocket science. We're going to attempt to pass a number of delimited variables through via the username field and split them at the freeradius end, mostly to avoid rewriting the php in the captive portal to use more orthodox existing attributes. Can someone confirm the maximum username field length? I can see in the RFCs that 63 is the recommended minimum nas length but there's not much else I can see in there. Thanks Andy
Username as in the RADIUS User-Name attribute? If so, it's a standard attribute, so a length of 253 octets (250 would probably be safer). Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 Janet, the UK’s research and education network. On 30 Sep 2014, at 10:21, Franks Andy (RLZ) IT Systems Engineer <Andy.Franks@sath.nhs.uk> wrote:
Hi all,
We have a project trying to integrate pfsense and freeradus together to form a captive portal, not rocket science.
We’re going to attempt to pass a number of delimited variables through via the username field and split them at the freeradius end, mostly to avoid rewriting the php in the captive portal to use more orthodox existing attributes.
Can someone confirm the maximum username field length? I can see in the RFCs that 63 is the recommended minimum nas length but there’s not much else I can see in there.
Thanks
Andy
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238
Franks Andy (RLZ) IT Systems Engineer wrote:
We’re going to attempt to pass a number of delimited variables through via the username field
Dear god no. This is a *terrible* idea. It will cause global warming, rickets, plagues, alien invasions, and help bring on the coming apocalypse.
and split them at the freeradius end, mostly to avoid rewriting the php in the captive portal to use more orthodox existing attributes.
There's no good reason to push crap onto someone else. Your laziness just makes life harder for everyone else. If you care about your users, *don't* do this.
Can someone confirm the maximum username field length? I can see in the RFCs that 63 is the recommended minimum nas length but there’s not much else I can see in there.
A lot of equipment and systems won't handle more than 63 characters. This is a terrible, evil, disgusting idea. RADIUS is full of enough crap already without people deliberately adding more. Alan DeKok.
participants (3)
-
Alan DeKok -
Franks Andy (RLZ) IT Systems Engineer -
Stefan Paetow