Proxy Question

Phil Mayers p.mayers at imperial.ac.uk
Mon Apr 24 18:32:59 CEST 2006


Reynold McGuire wrote:
> It gets to the pre-proxy, adds the domain after the user name, but doesn't
> strip out the 'DOMAIN\\\\'

Set "

> 
> Do you see any evidence that the 'ntdomain' is actually doing anything? I
> don't see much of anything except the one line 'modcall[authorize]: module
> "ntdomain" returns updated for request 0'

The lines immediately before the modcall[authorize] are also from the 
ntdomain module. So, it's output is:

     rlm_realm: Looking up realm "adm.suffolk.edu" for User-Name =
"adm.suffolk.edu\rmcguire"
     rlm_realm: Found realm "adm.suffolk.edu"
     rlm_realm: Proxying request from user rmcguire to realm adm.suffolk.edu
     rlm_realm: Adding Realm = "adm.suffolk.edu"
     rlm_realm: Preparing to proxy authentication request to realm
"adm.suffolk.edu"
   modcall[authorize]: module "ntdomain" returns updated for request 0

That means it's definitely running.

> 
> Any other ideas Phil / Group?
> 

Have you set "nostrip" on the realm in proxy.conf? Set "strip". For the 
behaviour you're seeing to be occurring, Stripped-User-Name must be unset.



More information about the Freeradius-Users mailing list