p.mayers at imperial.ac.uk
Mon Apr 24 18:32:59 CEST 2006
Reynold McGuire wrote:
> It gets to the pre-proxy, adds the domain after the user name, but doesn't
> strip out the 'DOMAIN\\\\'
> Do you see any evidence that the 'ntdomain' is actually doing anything? I
> don't see much of anything except the one line 'modcall[authorize]: module
> "ntdomain" returns updated for request 0'
The lines immediately before the modcall[authorize] are also from the
ntdomain module. So, it's output is:
rlm_realm: Looking up realm "adm.suffolk.edu" for User-Name =
rlm_realm: Found realm "adm.suffolk.edu"
rlm_realm: Proxying request from user rmcguire to realm adm.suffolk.edu
rlm_realm: Adding Realm = "adm.suffolk.edu"
rlm_realm: Preparing to proxy authentication request to realm
modcall[authorize]: module "ntdomain" returns updated for request 0
That means it's definitely running.
> Any other ideas Phil / Group?
Have you set "nostrip" on the realm in proxy.conf? Set "strip". For the
behaviour you're seeing to be occurring, Stripped-User-Name must be unset.
More information about the Freeradius-Users