Stripping windows domain with dot1x and peap

[Gary Gatten]

It would break EAP? If I enter my own creds and leave the Domain null it works great....

----- Original Message -----
From: freeradius-users-bounces+ggatten=waddell.com at lists.freeradius.org <freeradius-users-bounces+ggatten=waddell.com at lists.freeradius.org>
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Sent: Thu Oct 01 03:39:34 2009
Subject: Re: Stripping windows domain with dot1x and peap

> I'm back on this issue again. 2.1.6 on FBSD and RHEL.  When doing 8021x
> auth using winblows xp supplicant (wired) and the setting "use my windows
> username and password", I can't seem to get FR to strip the domain name.

Good. Because that would break EAP.

> I have the nt hack enabled in a couple places. Also read about using
> "realms" modules instead of enabling nt hack. Tried both as well as a
> couple different "--username" tweaks to no avail.
>
> Can someone point me in the right direction? I tried playing eap, mschap,
> default, innertunnel, etc.

Use ntdomain.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091001/849a4d37/attachment.html>