stripping domain from username (for wifi authentication on Windows XP)

Alan DeKok aland at deployingradius.com
Tue May 13 20:32:08 CEST 2008


Ryan Pugatch wrote:
...
>> Thanks for the response.  I'm using 1.1.x.  Currently, I have ldap
>> filter definined as:
>>
>>                 filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" 
>>
>> I have enabled with_ntdomain_hack on preprocess.

  Don't.

  Use: filter = "(uid=%{mschap:User-Name:-%{User-Name}}

  The MS-CHAP module is smart enough to know about horrible Microsoft
DOMAIN\user things.

  Alan DeKok.



More information about the Freeradius-Users mailing list