Freeradius + portuguese characters in Active Directory
Hi, I am creating a user account in AD with portuguese character and have the freeradius configured properly. But i am not able to get the successfull authentication. For example, i added a user account "catónio" and displayname as "catónio" But the radius server log shows, sending a user name as "cat\5c303\5c263nio ". Do we need to do anything different to support languages other than english or am i missing some other configuration? FYI: If i change the user account to plain exglish characters then it works, so there are no issues with configuration settings. Any idea why it happens and how to get it work with? Thanks, Nikitha
Okay. Currently I am running with 1.1.6, will upgrade to 2.0 and try it. Thanks for your information. Regards, Nikitha On 1/11/08, Alan DeKok <aland@deployingradius.com> wrote:
nikitha george wrote:
I am creating a user account in AD with portuguese character and have the freeradius configured properly.
1.1.x does not support UTF-8 that well. Version 2.0.0 should be much better. Please try that.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan, I tried with 2.0 release, still i am not able to get the user authenticated. I am seeing the freeradius which logs the user name as some different character instead of cató. Any other idea? Or did u guys ever tried with this kind of characters in user name? Thanks, Sumithra On 1/12/08, nikitha george <nikitha.george@gmail.com> wrote:
Okay. Currently I am running with 1.1.6, will upgrade to 2.0 and try it.
Thanks for your information. Regards, Nikitha
On 1/11/08, Alan DeKok <aland@deployingradius.com> wrote:
nikitha george wrote:
I am creating a user account in AD with portuguese character and have the freeradius configured properly.
1.1.x does not support UTF-8 that well. Version 2.0.0 should be much better. Please try that.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
nikitha george wrote:
Alan, I tried with 2.0 release, still i am not able to get the user authenticated. I am seeing the freeradius which logs the user name as some different character instead of cató.
Any other idea? Or did u guys ever tried with this kind of characters in user name?
I don't try it that often, but I haven tried it in the past. Perhaps you could say *where* this is happening. i.e. include a debug log, as suggested in the FAQ, README, INSTALL, etc. There may be places in the server which haven't been updated to handle UTF-8. Alan DeKok.
Please find the debug log below.. rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes. +- entering group authorize ++[preprocess] returns ok expand: %{User-Name} -> Catónio rlm_attr_rewrite: Added attribute Stripped-User-Name with value 'Catónio' ++[copy_user_name] returns ok expand: ^(.*[\/]+) -> ^(.*[\/]+) rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value 'Catónio' ++[add_dollar_sign] returns ok ++[chap] returns noop ++[mschap] returns noop ++[mschap] returns noop rlm_realm: No '/' in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix_oblic] returns noop rlm_realm: No '\' in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix_oblic_fs] returns noop rlm_realm: No '/' in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[prefix_oblic] returns noop rlm_realm: No '\' in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[prefix_oblic_fs] returns noop rlm_realm: No '@' <%27@%27> in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix_at] returns noop rlm_realm: No '@' <%27@%27> in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[prefix_at] returns noop rlm_realm: No '%' in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix_percent] returns noop rlm_realm: No '%' in User-Name = "Catónio", looking up realm NULL rlm_realm: No such realm "NULL" ++[prefix_percent] returns noop rlm_ldap: Entering ldap_groupcmp() expand: cn cn=mycn,dc=mydc,dc=com -> cn= cn=mycn,dc=mydc,dc=com expand: (uid=%{User-Name}) -> (uid=Catónio) rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in cn=mycn,dc=mydc,dc=com, with filter (uid=Catónio) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed On 1/14/08, Alan DeKok <aland@deployingradius.com> wrote:
nikitha george wrote:
Alan, I tried with 2.0 release, still i am not able to get the user authenticated. I am seeing the freeradius which logs the user name as some different character instead of cató.
Any other idea? Or did u guys ever tried with this kind of characters in user name?
I don't try it that often, but I haven tried it in the past.
Perhaps you could say *where* this is happening. i.e. include a debug log, as suggested in the FAQ, README, INSTALL, etc. There may be places in the server which haven't been updated to handle UTF-8.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
nikitha george wrote:
Please find the debug log below..
rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes. +- entering group authorize ++[preprocess] returns ok expand: %{User-Name} -> Catónio
It looks like it's not doing anything to the characters. Are you sure that the input is UTF-8, and not any other character set? Alan DeKok.
hi Catónio if its converted to UTF-8 then it should look like below in hex format. Try to get ur hex data and compare it with below data. If you are not getting the UTF-8 decoded information as shown in below then there must be an issue with encoding mechanism of free radius. C- 0x43 a- 0x61 t - 0x74 ó- 0xC3 b3 n-0x6e i-0x69 o-0x6f -gnr On Jan 16, 2008 2:17 PM, Alan DeKok <aland@deployingradius.com> wrote:
nikitha george wrote:
Please find the debug log below..
rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes. +- entering group authorize ++[preprocess] returns ok expand: %{User-Name} -> Catónio
It looks like it's not doing anything to the characters. Are you sure that the input is UTF-8, and not any other character set?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Gopinath Reddy N wrote:
Catónio if its converted to UTF-8 then it should look like below in hex format. Try to get ur hex data and compare it with below data.
If I cut & paste that from my mailer to the config files && test cases, it works. It doesn't mangle the name at all.
If you are not getting the UTF-8 decoded information as shown in below then there must be an issue with encoding mechanism of free radius.
That's what I see... Alan DeKok.
participants (3)
-
Alan DeKok -
Gopinath Reddy N -
nikitha george