New User and AD Question

Phil Mayers p.mayers at imperial.ac.uk
Wed Mar 2 10:28:10 CET 2011


On 03/01/2011 05:25 PM, McNutt, Justin M. wrote:
>
> Now it matches, but something about the regex is still wrong (mainly,
> the multi-character captures) because it's not expanding correctly.
> Short version:

These look like MS-CHAP machine-auth usernames; have you considered using:

%{mschap:User-Name}
%{mschap:NT-Domain}

The mschap module has special handling for host/ names, and these will 
expand:

host/name.domain.com

to:

name$
domain.com

The trailing dollar sign on the hostname is intentional; SAM account 
names for machines conventionally end in $ in windows.



More information about the Freeradius-Users mailing list