radius logs with garbage username
I have few fews which has garbage username, why does this happens ? radiusd[367]: Login OK: [u2ttxxBZPlxGkGvGiM6lhPw==]radiusd[369]: Login OK: [f2vnxxBZPlxGkGvGiM6lhPw==] any help
but these are not a valid users, On Wed, Oct 29, 2014 at 8:47 PM, Alan DeKok <aland@deployingradius.com> wrote:
Rando Nakarmi wrote:
I have few fews which has garbage username, why does this happens ?
Because the user sends a garbage username.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Rando Nakarmi wrote:
but these are not a valid users,
Then fix your RADIUS server to reject them. They look to be base64 encoded. Try decoding them to see what the real username is. And fix your database (or whatever you use) to ignore base64 encoded usernames. FreeRADIUS just takes what the user sends, and passes it to the database. If the database accepts the user with a bad name, blame the database. Not FreeRADIUS. Alan DeKok.
On Wed, 29 Oct 2014, Rando Nakarmi wrote:
I have few fews which has garbage username, why does this happens ?
radiusd[367]: Login OK: [u2ttxxBZPlxGkGvGiM6lhPw==] radiusd[369]: Login OK: [f2vnxxBZPlxGkGvGiM6lhPw==]
any help
Sounds like incorrectly configured mobile phones with Symbian OS. (If not configured correctly for WPAx-Enterprise, they tend to send identities with multiple delimiters, base64-encoded cert parts, and what not, in the User-Name...).
yes, I just reject as Alan suggested . And I use this regex to reject : if (User-Name =~ /^([^@]*)@([-A-Z0-9]+(\\.[-A-Z0-9]+)+)$/i) { ---- else ---- } Thanks, all On Sun, Nov 2, 2014 at 12:09 AM, Jan Rafaj <jr-freeradius@cedric.unob.cz> wrote:
On Wed, 29 Oct 2014, Rando Nakarmi wrote:
I have few fews which has garbage username, why does this happens ?
radiusd[367]: Login OK: [u2ttxxBZPlxGkGvGiM6lhPw==] radiusd[369]: Login OK: [f2vnxxBZPlxGkGvGiM6lhPw==]
any help
Sounds like incorrectly configured mobile phones with Symbian OS. (If not configured correctly for WPAx-Enterprise, they tend to send identities with multiple delimiters, base64-encoded cert parts, and what not, in the User-Name...).
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
participants (4)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Jan Rafaj -
Rando Nakarmi