Re: RE : EAP-TTLS outer identity & accounting
On Wed, 14 Mar 2007 11:25:20 -0500 Thibault Le Meur <Thibault.LeMeur@supelec.fr> wrote:
-----Message d'origine----- De : freeradius-users-bounces+thibault.lemeur=supelec.fr@lists.free radius.org [mailto:freeradius-users-bounces+thibault.lemeur=supelec.fr@li sts.freeradius.org] De la part de Sam Schultz Envoyé : mercredi 14 mars 2007 17:13 À : freeradius-users@lists.freeradius.org Objet : Re: EAP-TTLS outer identity & accounting
On Tue, 13 Mar 2007 13:15:52 -0500 Alan DeKok <aland@deployingradius.com> wrote:
Sam Schultz wrote:
This should be solvable by adding something like 'User-Name = %{User-Name}' to the DEFAULT entries in the
users file,
correct?
Yes.
One of my users file DEFAULT entries look like this:
DEFAULT Realm == "test", Autz-Type := sql-test, User- Name = "%u"
However, FreeRADIUS tells me this:
Error: Invalid operator for item User-Name: reverting to '=='
I assume I'm not supposed to forcibly change User-Name, so what attribute would I set to return the correct username to the NAS?
I know there is a run-time variable %(reply:User-Name}, would I need to somehow update it with the correct value for User-Name instead?
Yes, by simply adding the User-Name = XXX to the reply items (that is to say not on the first line). Try something like this:
This didn't make much sense at first, but I think I understand it now. What you're saying is that the first line is only for check items, which is why I couldn't set User-Name there. The second line and beyond then are for, what? Reply items ONLY, or check & reply items? Is this documented anywhere? I just did a quick check through the freeradius doc directory, and only found a rlm_fastusers document which didn't have anything to say about format restrictions.
DEFAULT Realm == "test", Autz-Type := sql-test User-Name=`%{User-Name}`
HTH, Thibault
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Click for free info on online degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S7YfNF4AEzCH38YxSm8GfpqO2/
Sam Schultz wrote:
What you're saying is that the first line is only for check items, which is why I couldn't set User-Name there. The second line and beyond then are for, what? Reply items ONLY, or check & reply items? Is this documented anywhere?
In the comments in the "users" file, and in "man rlm_files", which is the man page for the module implementing the "users" file. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Sam Schultz