realm in User-Name stripped in accounting data?
Hi all, We setup proxy (on freeradius 2.1.3) by putting following lines in users and acct_users: DEFAULT Huntgroup-Name == Aruba, Aruba-Essid-Name == "Univ WiFi", Realm != "localream.mydomain", Proxy-to-realm := "remoteRealm" Authentication works properly while User-Name in accounting data, the @realm part is removed. However, there is no problem for other 'simple' proxy settings (only define realm in proxy.conf, without Proxy-to-realm). We're using LDAP as authentication backend. Would anyone please advise if we can keep the @realm part in all accounting data? Thanks a lot. /ST Wong
We setup proxy (on freeradius 2.1.3) by putting following lines in users and acct_users:
DEFAULT Huntgroup-Name == Aruba, Aruba-Essid-Name == "Univ WiFi", Realm != "localream.mydomain", Proxy-to-realm := "remoteRealm"
Authentication works properly while User-Name in accounting data, the @realm part is removed.
Is it there in Access-Accept? If username is stripped in Access-Accept it won't be present in accounting packets. Ivan Kalik Kalik Informatika ISP
We setup proxy (on freeradius 2.1.3) by putting following lines in users and acct_users:
DEFAULT Huntgroup-Name == Aruba, Aruba-Essid-Name == "Univ WiFi", Realm != "localream.mydomain", Proxy-to-realm := "remoteRealm"
Authentication works properly while User-Name in accounting data, the
@realm part is removed.
Is it there in Access-Accept? If username is stripped in Access-Accept it won't be present in accounting packets.
No, it's not in Access-Accept... Is it possible to append @realm part to proxied User-Name field in accounting data (or somewhere else where appropriate)? Thanks a lot. /ST Wong
participants (2)
-
Ivan Kalik -
ST Wong (ITSC)