windows domain\user change to user at domain

tnt at kalik.net tnt at kalik.net
Wed Dec 16 01:42:18 CET 2009


It does, but ntdomain is not enabled by default. You need to uncomment
that entry in authorize.

Ivan Kalik

> in the /etc/raddb/modules/realm, the windows domain prefix \\ does not
> seem
> to work. It still get proxy to the NULL realm. But if i use user!@H1 it is
> proxy correctly to H1 realm and not NULL realm. Can advise anything i
> missed
> out in the proxy.conf or radiusd.conf?
>
> *in the radius -X debug, H1\user1 does not get to proxy to H1 realm*
> User-Name = "H1\\user1"
>         User-Password = "password"
> +- entering group authorize {...}
> ++[preprocess] returns ok
> ++[chap] returns noop
> ++[mschap] returns noop
> [suffix] No '@' in User-Name = "H1\user1", looking up realm NULL
> [suffix] Found realm "NULL"
> [suffix] Adding Stripped-User-Name = "H1\user1"
> [suffix] Adding Realm = "NULL"
> [suffix] Proxying request from user H1\user1 to realm NULL
> [suffix] Preparing to proxy authentication request to realm "NULL"
>
>
> *In the proxy.conf
> *
> realm H1 {
>        type             = radius
>         nostrip
>         authhost        = 1.2.3.4:1812
>        accthost        = 1.2.3.4:1813
>        secret          = secret1
>         retry_delay = 3
>         retry_count = 1
> }
>
>
> *user1 at H1 get proxy correct to H1 realm. *
>         User-Name = "user1 at H1"
>         User-Password = "password"
> +- entering group authorize {...}
> ++[preprocess] returns ok
> ++[chap] returns noop
> ++[mschap] returns noop
> [suffix] Looking up realm "H1" for User-Name = "user1 at H1"
> [suffix] Found realm "H1"
> [suffix] Adding Realm = "H1"
> [suffix] Proxying request from user wlanH1 to realm H1
> [suffix] Preparing to proxy authentication request to realm "H1"
>
>
>
> On Wed, Dec 16, 2009 at 7:06 AM, green green <gggreen4 at gmail.com> wrote:
>
>> can advise how to rewrite the username in domain\user to user at domain so
>> that the realm can be done to proxy the radius request to the upstream
>> radius server.
>>
>> or no rewrite of username is need. can the freeradius proxy based on
>> domain\user which domain\ can be use as realm to radius proxy to
>> upstream
>> radius server.
>>
>> please advise and thanks.
>>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list