Error: User-Name is not the same as MS-CHAP name

Robert Mc Cready robert-mccready at cspi.qc.ca
Tue May 10 17:05:09 CEST 2011


The host name are not domain names, there are computers account name, and we
have hundreds of them . We only use the MS Domain to authenticate the
computers account, not the users.


-----Message d'origine-----
De :
freeradius-users-bounces+robert-mccready=cspi.qc.ca at lists.freeradius.org
[mailto:freeradius-users-bounces+robert-mccready=cspi.qc.ca at lists.freeradius
.org] De la part de Alan DeKok
Envoyé : 10 mai 2011 10:49
À : FreeRadius users mailing list
Objet : Re: Error: User-Name is not the same as MS-CHAP name

Robert Mc Cready wrote:
> If the User-Name is being rewritten it is not intentional.

  Well... it's obviously someone you've changed, because it doesn't
happen in the default configuration.

> Now, I reinstalled from scratch, save the default configuration, join the
> server to the domain, modified clients.conf, attr_rewrite, ldap, mschap
and
> inner-tunnel and ran diff. I can see in the debug output of the server
that
> User-Name = "CAD08862\\ldapuser" but I don't know want I am doing wrong.

  You're stripping the domain.  Why?  It's just not necessary.  The way
you're doing it is wrong, and is breaking the server.

  Instead, set up CAD08862 as a LOCAL realm.  See proxy.conf.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

 

__________ Information provenant d'ESET NOD32 Antivirus, version de la base
des signatures de virus 6110 (20110510) __________

Le message a été vérifié par ESET NOD32 Antivirus.

http://www.eset.com
 
 

__________ Information provenant d'ESET NOD32 Antivirus, version de la base
des signatures de virus 6110 (20110510) __________

Le message a été vérifié par ESET NOD32 Antivirus.

http://www.eset.com
 





More information about the Freeradius-Users mailing list