Hi, In LDAP config module, we can find filter = "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(mail=%{%{Stripped-User-Name}:-%{User-Name}}))" Users authenticate in freeradius with login like pierre.dupont@12345678 We want to use both parts of adress in LDAP filter. pierre.dupont is %{User-Name} what should be the name of the variable for 12345678 ? -- Emmanuel BILLOT CATEL - Dpt. Système et Réseaux Rectorat - Académie d'Orléans-Tours 10, rue Molière - 45000 Orléans Tél : 02 38 79 45 57
On 24.01.2013 14:03, Emmanuel BILLOT wrote:
Hi,
In LDAP config module, we can find
filter = "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(mail=%{%{Stripped-User-Name}:-%{User-Name}}))"
Users authenticate in freeradius with login like pierre.dupont@12345678
then this will be in User-Name unless you made manipulation with it (what you should never do btw)
We want to use both parts of adress in LDAP filter.
pierre.dupont is %{User-Name}
then your user is logging with "pierre.dupont" and not "pierre.dupont@123456"
what should be the name of the variable for 12345678 ?
use %{User-Name} Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org
Le 24/01/2013 14:03, Emmanuel BILLOT a écrit :
Hi,
In LDAP config module, we can find
filter = "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(mail=%{%{Stripped-User-Name}:-%{User-Name}}))"
Users authenticate in freeradius with login like pierre.dupont@12345678
We want to use both parts of adress in LDAP filter.
pierre.dupont is %{User-Name}
what should be the name of the variable for 12345678 ?
I guess it is %{Realm} ? -- Emmanuel BILLOT CATEL - Dpt. Système et Réseaux Rectorat - Académie d'Orléans-Tours 10, rue Molière - 45000 Orléans Tél : 02 38 79 45 57
On 24.01.2013 14:26, Emmanuel BILLOT wrote:
I guess it is %{Realm} ?
this will contain the realm yeah. But why do you want to to %{Stripped-User-Name}@%{Realm} when it is the same as %{User-Name} ? -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org
Le 24/01/2013 14:03, Emmanuel BILLOT a écrit :
Hi,
In LDAP config module, we can find
filter = "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(mail=%{%{Stripped-User-Name}:-%{User-Name}}))"
Users authenticate in freeradius with login like pierre.dupont@12345678
We want to use both parts of adress in LDAP filter.
pierre.dupont is %{User-Name}
what should be the name of the variable for 12345678 ?
Ok %{Realm} seems to works, however anyway to force upcase on it ? -- Emmanuel BILLOT CATEL - Dpt. Système et Réseaux Rectorat - Académie d'Orléans-Tours 10, rue Molière - 45000 Orléans Tél : 02 38 79 45 57
On 24.01.2013 14:34, Emmanuel BILLOT wrote:
Le 24/01/2013 14:03, Emmanuel BILLOT a écrit :
Hi,
In LDAP config module, we can find
filter = "(|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(mail=%{%{Stripped-User-Name}:-%{User-Name}}))"
Users authenticate in freeradius with login like pierre.dupont@12345678
We want to use both parts of adress in LDAP filter.
pierre.dupont is %{User-Name}
what should be the name of the variable for 12345678 ?
Ok %{Realm} seems to works, however anyway to force upcase on it ?
%{toupper:%{realm}} ? -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org
participants (2)
-
Emmanuel BILLOT -
Olivier Beytrison