Identity does not match User-Name, setting from EAP Identity

ZHANG Gina Gina.Zhang at alcatel-lucent.com
Thu Oct 1 22:14:50 CEST 2009


Ivan,

Thanks a lot for your help! Could you elaborate on proxy.conf change I
should make?
Is it like the following:

realm LOCAL {

	{m=1 

}

Thanks,
Gina

-----Original Message-----
From:
freeradius-users-bounces+gina.zhang=alcatel-lucent.com at lists.freeradius.
org
[mailto:freeradius-users-bounces+gina.zhang=alcatel-lucent.com at lists.fre
eradius.org] On Behalf Of Ivan Kalik
Sent: Thursday, October 01, 2009 11:55 AM
To: FreeRadius users mailing list
Subject: Re: Identity does not match User-Name, setting from EAP
Identity

> I have a username and identity in EAP attribute with pattern 
> {m=1}xxxx at xxxx.
> I need to remove {m=1} for both username and identity in EAP
attribute.
> I put some regular expression in default file authorize section to 
> remove {m=1} for username and it works!
> But I have not found a way to remove {m=1} for identity in EAP packet.

The whole point of EAP is that you - can't. You can't alter username
without breaking EAP. The best you can do is to define prefix type realm
in raddb/modules/realm with ) as delimiter and local realm (m=1 in
proxy.conf. That should leave the rest as Stripped-User-Name.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list