Adding default Realms in users without Realms

Arran Cudbard-Bell a.cudbardb at freeradius.org
Wed Aug 24 21:48:23 CEST 2011


On 24 Aug 2011, at 21:34, joaocdc at gmail.com wrote:

> Well the way we suggested to me you did not, however based on what you
> gave me I made a small change and it worked. Put this in the
> authorize.

The way I suggested will work if you put it at the top of authorize before calling any of the realm modules, but anyway if you want to just set the realm, go ahead... just sounded like you wanted the request to run through existing logic.

Your code should really be:

if(User-Name !~ /@/){
	update control {
		Proxy-To-Realm := "myrealm"
	}
}

This is the supported way of manually setting a proxy realm.

If you really wanted to do this with the users file

users file:

DEFAULT	User-Name !~ /@/, Proxy-To-Realm := "myrealm"

Might work, no guarantees though. Not sure how special Proxy-To-Realm is....

-Arran

> 
> Thank you.
> 
> 2011/8/24 Arran Cudbard-Bell <a.cudbardb at freeradius.org>:
>> 
>> On 24 Aug 2011, at 20:42, joaocdc at gmail.com wrote:
>> 
>>> Hello everybody I have a doubt and I'm not finding answers on the Internet.
>>> 
>>> I have a freeradius server operating normally, it is a proxy for
>>> several Realms, with each Realm leads the user to a different
>>> authentication database, so far okay.
>>> 
>>> What I need now is to get users coming to the radius without realm,
>>> and add a default realm. I need to do this early on in the
>>> authentication processing, so that the other conditions that rely on
>>> authentication of the existence of a realm can function correctly.
>>> 
>> 
>> If you mean just adding a string onto the username then yes...
>> 
>> if(User-Name !~ /username with realm... etc.../){
>>        update request {
>>                User-Name := "%{User-Name}@realm"
>>        }
>> }
>> 
>> Arran Cudbard-Bell
>> a.cudbardb at freeradius.org
>> 
>> RADIUS - Half the complexity of Diameter
>> 
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>> 
> 
> 
> 
> -- 
> João Paulo de Lima Barbosa
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 

Arran Cudbard-Bell
a.cudbardb at freeradius.org

RADIUS - Half the complexity of Diameter





More information about the Freeradius-Users mailing list