Policy to split domain and host

nicolas.clo at ricoh-industrie.fr nicolas.clo at ricoh-industrie.fr
Fri Aug 16 12:54:54 CEST 2013


Nice, thanks

But in this case, how to tell Freeradius to use this variable when it's a host connection ?
Because, I had already split User-Name variable into Stripped-User-name and use that into post-auth
section to log correct syntax user.
So if I tell Freeradius to used variable %{mschap:User-Name}, I think it will be logging original
request UserName, no ?

How to define a second post auth request when it's a host ?

For example, I want the Stripped-UserName into sql postauth table when it's a user and the variable
%{mschap:User-Name} when i'ts a host connection.

Thanks.


Nicolas CLO



On 08/16/2013 08:24 AM, nicolas.clo at ricoh-industrie.fr wrote:
> Hi list,
>
>     I'm searching the best way to configure a policy to split the domain
>     and the prefix ' /host' when it is a computer connection.

You probably don't want to do this.

Instead, you probably want to use the expansion:

%{mschap:User-Name}

...which correctly transforms:

host/name.domain.com

...to:

name$

...which is the correct form of the samaccountname for an AD computer
account, which is I assume what you're dealing with.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130816/ae61a152/attachment.html>


More information about the Freeradius-Users mailing list