choose proxy based on AD

[David McPike]

Hello All,

We are in the process of migrating users from one AD tree to another.
The migrated accounts will exist in both AD directories for a while
(usernames will not change) and I need to be able to choose a radius
server based on an LDAP group membership.  I have this working fine
for cases where users do not supply a realm but I am not sure of the
best way to do this for users that do supply an ntdomain-style realm.
In the new domain, no one requires a realm (need to strip if the user
has already been migrated), while the old domain has several child
domains.  I am using FR 2.1.10.

I was not successful trying to change the proxy server after one had
already been chosen.  I tried to remove the Realm attribute in the
authorize section but the request still went to the initially chosen
radius pool.

I tried stripping the realm manually prior to realm processing in
authorize {} but have not been successful yet.  I am using a simple
regex like this:
if (User-Name =~ /^[A-z]+\\(.*)/) {
    update request {
        Stripped-User-Name := "%{1}"
    }
}

This always fails for 'radtest realm\\user'.

Am I missing something or is there a more elegant way to accomplish this?

Thanks very much,
David