Update User-Name AVP on Post Auth module

Alan DeKok aland at deployingradius.com
Fri Oct 20 16:02:36 UTC 2023


On Oct 20, 2023, at 11:49 AM, Suriya Shankar <suriya.dshankar at gmail.com> wrote:
> I am aware that It's not good to alter the User-Name  but I have a
> requirement.

  If the requirement is to modify the User-Name in the request, then the requirement is wrong.

  I can require that my bicycle go 200Kph, but that doesn't make it realistic.

> I am authenticating an EAP_TTLS request and during the
> Post-Auth section every module in the Unlang is being called by
> *modcall_recurse*, one such is the policy module where I update the
> User-Name along with other standard AVP in reply just to verify.

  You can edit the User-Name in the reply.  That doesn't affect anything.

> As soon as
> the control came back to the modcall.c *User-Name* value alone kept intact.
> Is there some sort of callback or method handle that reverts back the
> User-Name to its original.

  I don't think you need to change the User-Name.

  Any policy which needs a changed User-Name can be modified to use the Stripped-User-Name.  That's what the Stripped-User-Name is for.

  Alan DeKok.



More information about the Freeradius-Devel mailing list