Re: Identity does not match User-Name, setting from EAP Identity
I have a username and identity in EAP attribute with pattern {m=1}xxxx@xxxx. I need to remove {m=1} for both username and identity in EAP attribute. I put some regular expression in default file authorize section to remove {m=1} for username and it works! But I have not found a way to remove {m=1} for identity in EAP packet.
The whole point of EAP is that you - can't. You can't alter username without breaking EAP. The best you can do is to define prefix type realm in raddb/modules/realm with ) as delimiter and local realm (m=1 in proxy.conf. That should leave the rest as Stripped-User-Name. Ivan Kalik Kalik Informatika ISP
Ivan, Thanks a lot for your help! Could you elaborate on proxy.conf change I should make? Is it like the following: realm LOCAL { {m=1 } Thanks, Gina -----Original Message----- From: freeradius-users-bounces+gina.zhang=alcatel-lucent.com@lists.freeradius. org [mailto:freeradius-users-bounces+gina.zhang=alcatel-lucent.com@lists.fre eradius.org] On Behalf Of Ivan Kalik Sent: Thursday, October 01, 2009 11:55 AM To: FreeRadius users mailing list Subject: Re: Identity does not match User-Name, setting from EAP Identity
I have a username and identity in EAP attribute with pattern {m=1}xxxx@xxxx. I need to remove {m=1} for both username and identity in EAP attribute. I put some regular expression in default file authorize section to remove {m=1} for username and it works! But I have not found a way to remove {m=1} for identity in EAP packet.
The whole point of EAP is that you - can't. You can't alter username without breaking EAP. The best you can do is to define prefix type realm in raddb/modules/realm with ) as delimiter and local realm (m=1 in proxy.conf. That should leave the rest as Stripped-User-Name. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Ivan Kalik -
ZHANG Gina