Problem sanitising usernames in accounting

[Jonathan Gazeley]

On 10/07/2009 10:44 AM, Ivan Kalik wrote:
>> I'm seeing a problem with stripping usernames during accounting.
>>
>> Accounting is done on a separate physical server from the authentication
>> (which works fine).
>>
>> Most of our users don't include a domain so their accounting works
>> normally. Some users do send the domain (UOB) and this breaks the
>> accounting because the backslash doesn't seem to get escaped.
>>
>> The account detail files have entries like User-Name = "UOB\\username"
>> but when this gets inserted into the database the backslash(es) are not
>> escaped and if the username starts with n, r or some other letters, the
>> database sees \n, \r and inserts linebreaks and other undesirable
>> characters.
>>
>> Then selecting from the database to generate statistics returns garbage,
>> obviously.
>>
>> At the top of dialup.conf I replaced sql_user_name = "%{User-Name}" with
>> sql_user_name = "%{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}}" but
>> Stripped-User-Name does not have a value.
>>
>> I'm not interested in the domain in my accounting, so does anyone have
>> any guidance on how to safely strip/sanitise the usernames?
>>      
> Activate ntdomain in preacct and create local realm in proxy.conf:
>
> realm UOB {
> }
>
> That should give you Stripped-User-Name.
>
> Ivan Kalik
> Kalik Informatika ISP
>    

Thanks, this works nicely.