User-Name case insensitive, spaces - freeradius 2.1.12
Hi all, Usage freeradius 2.1.2 and i'm with problems about username authentication. Simply authentication accept any variations of the same username. Example: Register user: "var" Is accept: "Var" "vAr" "vaR" VaR" "VAr" "vAR" "var " ... This ends "bypassing" the blockage i do for multiple sessions with the same user. ( attribute Simultaneous-Use ) I noticed that the file */**path/freeradius/policy.conf* have the function with filters if to solve problem, but not function. The unique that works is filter space start. filter_username { # spaces at the start: reject if (User-Name =~ /^ /) { reject } * # spaces at the end: reject** ** if (User-Name =~ / $$/) {** ** reject** ** }* *# Mixed case: reject** ** if (User-Name != "%{tolower:%{User-Name}}") {** ** reject** ** }* } Appreciate the help. -- * * **Bruno G Correia** Analista de Redes <http://br.linkedin.com/in/brunocorr> (83) 8812-2235 (83) 9862-0224
Hi,
Usage freeradius 2.1.2 and i'm with problems about username authentication.
Simply authentication accept any variations of the same username. Example:
either use the filter_username and enable the case checking rule, or 'tolower' your user-name when checking directly but just enabling this:
*# Mixed case: reject** ** if (User-Name != "%{tolower:%{User-Name}}") {** ** reject** ** }*
by commenting it and calling filter_username in yoru authorization stage should work alan
I do not understand where exactly the change must be made. Where is made the function call "filter_username"? Thank you On 23-05-2014 07:53, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Usage freeradius 2.1.2 and i'm with problems about username authentication.
Simply authentication accept any variations of the same username. Example: either use the filter_username and enable the case checking rule, or 'tolower' your user-name when checking directly but just enabling this:
*# Mixed case: reject** ** if (User-Name != "%{tolower:%{User-Name}}") {** ** reject** ** }* by commenting it and calling filter_username in yoru authorization stage should work
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- * * **Bruno G Correia** Analista de Redes <http://br.linkedin.com/in/brunocorr> (83) 8812-2235 (83) 9862-0224
Apologies, I thought a little and remembered *../sites-available/default*, thank you! Only uncomment the call to "filter_username" function at the beginning of the session authorize {} On 23-05-2014 07:53, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Usage freeradius 2.1.2 and i'm with problems about username authentication.
Simply authentication accept any variations of the same username. Example: either use the filter_username and enable the case checking rule, or 'tolower' your user-name when checking directly but just enabling this:
*# Mixed case: reject** ** if (User-Name != "%{tolower:%{User-Name}}") {** ** reject** ** }* by commenting it and calling filter_username in yoru authorization stage should work
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- * * **Bruno G Correia** Analista de Redes <http://br.linkedin.com/in/brunocorr> (83) 8812-2235 (83) 9862-0224
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Bruno Correia