windows domain\user change to user@domain
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server. or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server. please advise and thanks.
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
No rewrite needed. Enable ntdomain. It's in configuration just below suffix (which deals with name@domain usernames). Ivan Kalik
Thanks for the reply. As detailed in my previous email, user1@H1 work (get proxy to H1 realm) but not the windows H1\user1 (it does NOT get proxy to H1 realm, instead get to the NULL realm). Can advise and thanks. On Wed, Dec 16, 2009 at 8:32 AM, <tnt@kalik.net> wrote:
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
No rewrite needed. Enable ntdomain. It's in configuration just below suffix (which deals with name@domain usernames).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
In the relam already enable the ntdomain, realm ntdomain { format = prefix delimiter = "\\" } in the proxy.conf realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 } Work for user1@H1 (get proxy to H1 realm) but not H1\user1(does NOT get proxy to H1 realm instead go to NULL realm). Can advise and thanks. On Wed, Dec 16, 2009 at 8:37 AM, green green <gggreen4@gmail.com> wrote:
Thanks for the reply. As detailed in my previous email, user1@H1 work (get proxy to H1 realm) but not the windows H1\user1 (it does NOT get proxy to H1 realm, instead get to the NULL realm). Can advise and thanks.
On Wed, Dec 16, 2009 at 8:32 AM, <tnt@kalik.net> wrote:
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
No rewrite needed. Enable ntdomain. It's in configuration just below suffix (which deals with name@domain usernames).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks. Have uncomment ntdomain in the authorize section, still does not work [root@rad1 sites-enabled]# pwd /etc/raddb/sites-enabled [root@rad1 sites-enabled]# vi default authorize { suffix ntdomain } remove the #. Still not working. Can advise and thanks.Do i need to made any change in the proxy.conf in the proxy.conf realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 } On Wed, Dec 16, 2009 at 8:49 AM, <tnt@kalik.net> wrote:
In the relam already enable the ntdomain,
Yes. But is the virtual server using it? No. Why? Because it's not enabled by default. How to enable it? Uncomment ntdomain entry in authorize section of the defauly virtual server (raddb/sites-enabled/default).
Clear now?
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Have already uncomment (remove the # infront of the ntdomain under /etc/raddb/sites-enabled/default), still not working. H1\user1 get proxy to NULL realm instead of H1 realm. On Wed, Dec 16, 2009 at 9:04 AM, green green <gggreen4@gmail.com> wrote:
Thanks. Have uncomment ntdomain in the authorize section, still does not work
[root@rad1 sites-enabled]# pwd /etc/raddb/sites-enabled [root@rad1 sites-enabled]# vi default
authorize { suffix ntdomain }
remove the #. Still not working. Can advise and thanks.Do i need to made any change in the proxy.conf
in the proxy.conf realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 }
On Wed, Dec 16, 2009 at 8:49 AM, <tnt@kalik.net> wrote:
In the relam already enable the ntdomain,
Yes. But is the virtual server using it? No. Why? Because it's not enabled by default. How to enable it? Uncomment ntdomain entry in authorize section of the defauly virtual server (raddb/sites-enabled/default).
Clear now?
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Have already uncomment (remove the # infront of the ntdomain under /etc/raddb/sites-enabled/default), still not working. H1\user1 get proxy to NULL realm instead of H1 realm.
Post the debug with nidomain enabled. Do you have NULL realm defined in proxy.conf? Ivan Kalik
in the /etc/raddb/modules/realm, the windows domain prefix \\ does not seem to work. It still get proxy to the NULL realm. But if i use user!@H1 it is proxy correctly to H1 realm and not NULL realm. Can advise anything i missed out in the proxy.conf or radiusd.conf? *in the radius -X debug, H1\user1 does not get to proxy to H1 realm* User-Name = "H1\\user1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "H1\user1", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "H1\user1" [suffix] Adding Realm = "NULL" [suffix] Proxying request from user H1\user1 to realm NULL [suffix] Preparing to proxy authentication request to realm "NULL" *In the proxy.conf * realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 } *user1@H1 get proxy correct to H1 realm. * User-Name = "user1@H1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "H1" for User-Name = "user1@H1" [suffix] Found realm "H1" [suffix] Adding Realm = "H1" [suffix] Proxying request from user wlanH1 to realm H1 [suffix] Preparing to proxy authentication request to realm "H1" On Wed, Dec 16, 2009 at 7:06 AM, green green <gggreen4@gmail.com> wrote:
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
please advise and thanks.
It does, but ntdomain is not enabled by default. You need to uncomment that entry in authorize. Ivan Kalik
in the /etc/raddb/modules/realm, the windows domain prefix \\ does not seem to work. It still get proxy to the NULL realm. But if i use user!@H1 it is proxy correctly to H1 realm and not NULL realm. Can advise anything i missed out in the proxy.conf or radiusd.conf?
*in the radius -X debug, H1\user1 does not get to proxy to H1 realm* User-Name = "H1\\user1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "H1\user1", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "H1\user1" [suffix] Adding Realm = "NULL" [suffix] Proxying request from user H1\user1 to realm NULL [suffix] Preparing to proxy authentication request to realm "NULL"
*In the proxy.conf * realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 }
*user1@H1 get proxy correct to H1 realm. * User-Name = "user1@H1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "H1" for User-Name = "user1@H1" [suffix] Found realm "H1" [suffix] Adding Realm = "H1" [suffix] Proxying request from user wlanH1 to realm H1 [suffix] Preparing to proxy authentication request to realm "H1"
On Wed, Dec 16, 2009 at 7:06 AM, green green <gggreen4@gmail.com> wrote:
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
please advise and thanks.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
*in the /etc/raddb/modules/realm file, * realm ntdomain { format = prefix delimiter = "\\" } *In the proxy.conf *realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 } There are no # infront, thus already uncomment. Can you advise if anything new thing need to do at the proxy.conf On Wed, Dec 16, 2009 at 8:42 AM, <tnt@kalik.net> wrote:
It does, but ntdomain is not enabled by default. You need to uncomment that entry in authorize.
Ivan Kalik
in the /etc/raddb/modules/realm, the windows domain prefix \\ does not seem to work. It still get proxy to the NULL realm. But if i use user!@H1 it is proxy correctly to H1 realm and not NULL realm. Can advise anything i missed out in the proxy.conf or radiusd.conf?
*in the radius -X debug, H1\user1 does not get to proxy to H1 realm* User-Name = "H1\\user1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "H1\user1", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "H1\user1" [suffix] Adding Realm = "NULL" [suffix] Proxying request from user H1\user1 to realm NULL [suffix] Preparing to proxy authentication request to realm "NULL"
*In the proxy.conf * realm H1 { type = radius nostrip authhost = 1.2.3.4:1812 accthost = 1.2.3.4:1813 secret = secret1 retry_delay = 3 retry_count = 1 }
*user1@H1 get proxy correct to H1 realm. * User-Name = "user1@H1" User-Password = "password" +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "H1" for User-Name = "user1@H1" [suffix] Found realm "H1" [suffix] Adding Realm = "H1" [suffix] Proxying request from user wlanH1 to realm H1 [suffix] Preparing to proxy authentication request to realm "H1"
On Wed, Dec 16, 2009 at 7:06 AM, green green <gggreen4@gmail.com> wrote:
can advise how to rewrite the username in domain\user to user@domain so that the realm can be done to proxy the radius request to the upstream radius server.
or no rewrite of username is need. can the freeradius proxy based on domain\user which domain\ can be use as realm to radius proxy to upstream radius server.
please advise and thanks.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
in the /etc/raddb/modules/realm file,
realm ntdomain { format = prefix delimiter = "\\" }
In the proxy.conf realm H1 { type = radius nostrip authhost = 1.2.3.4:1812<http://1.2.3.4:1812/> accthost = 1.2.3.4:1813<http://1.2.3.4:1813/> secret = secret1 retry_delay = 3 retry_count = 1 }
There are no # infront, thus already uncomment. Can you advise if anything new thing need to do at the proxy.conf
read the other replies _carefully_ - its not just the realm file and the proxy.conf - you need to also edit sites-enabled/default and find the commented out ntdomain and prefix part in the authorize section and enable them alan
participants (3)
-
Alan Buxey -
green green -
tnt＠kalik.net