No Realm in table radacct

Fajar A. Nugraha list at fajar.net
Mon Oct 22 22:02:06 CEST 2012


On Mon, Oct 22, 2012 at 11:13 PM,  <xylakant at vorsicht-bissig.de> wrote:
> Hi Guys,
>
> thank you for your answers. I killed the attribute user-name on my global radius server in post-proxy and post-auth sections by unlang.
>
> Now I have got the full username on my server, because it is not overwritten by other radius communicatons.
>
> The realm is not in the radacct table of server A. But I kow the reason, because FR doesn't know this realms. But thats ok.

Good to know.

>
>>What I don't understand is how come the reply that FR sends STILL contains User-Name.
>>Reading raddb/attrs and raddb/modules/attr_filter, it looks like FR should never allow User-Name on Access-Accept.
>>Did you REMOVE attr_filter.post-proxy from raddb/sites-available/default or whatever virtual server you're using?
>
> Sry, I don't understand the problem. I see more attributes than just user-name. All filters are disabled by default.
> A filter is only for rejecting requests, which are not matching. Right?

No.

And that, is the root of your problem: blindly changing config files
without knowing what it's for. Had you left it the way it was in the
first place, you wouldn't have had this problem.

-- 
Fajar


More information about the Freeradius-Users mailing list