Support Ntdomain and Suffix For Ad authentication
Hi , I am just trying to see if its possible to get usernames of both formats to authenticate on FR. Based on the howto here http://wiki.freeradius.org/guide/freeradius-active-directory-integ ration-howto It seems to be either or in the mschap module. I tried a few combination like so in the username expansion --username=%{%{mschap:User-Name}:-00} --> Domain\username works , but username@d omain breaks because we are not passing the Stripped username --username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} user@domain works but domain\user breaks. Any way I can combine the above to expansions and support both username formats .. Your help is appreciated. Many Thanks Arnab
On Mar 11, 2017, at 11:29 AM, Arnab Roy <arnabroy@mail.com> wrote:
I am just trying to see if its possible to get usernames of both formats to authenticate on FR. Based on the howto here http://wiki.freeradius.org/guide/freeradius-active-directory-integ ration-howto
It seems to be either or in the mschap module. I tried a few combination like so in the username expansion
--username=%{%{mschap:User-Name}:-00} --> Domain\username works , but username@d omain breaks because we are not passing the Stripped username
So... edit it to pass the Stripped-User-Name.
--username=%{%{Stripped-User-Name}:-%{%{User-Name}:-None}} user@domain works but domain\user breaks.
Because you edited it to remove %{mschap:User-Name}.
Any way I can combine the above to expansions and support both username formats ..
See "man unlang". Specifically the few paragraphs following: %{%{Foo}:‐bar} This *is* documented. Alan DeKok.
participants (2)
-
Alan DeKok -
Arnab Roy