Policy to split domain and host

nicolas.clo at ricoh-industrie.fr nicolas.clo at ricoh-industrie.fr
Fri Aug 16 12:54:54 CEST 2013

Nice, thanks

But in this case, how to tell Freeradius to use this variable when it's a host connection ?
Because, I had already split User-Name variable into Stripped-User-name and use that into post-auth
section to log correct syntax user.
So if I tell Freeradius to used variable %{mschap:User-Name}, I think it will be logging original
request UserName, no ?

How to define a second post auth request when it's a host ?

For example, I want the Stripped-UserName into sql postauth table when it's a user and the variable
%{mschap:User-Name} when i'ts a host connection.


Nicolas CLO

On 08/16/2013 08:24 AM, nicolas.clo at ricoh-industrie.fr wrote:
> Hi list,
>     I'm searching the best way to configure a policy to split the domain
>     and the prefix ' /host' when it is a computer connection.

You probably don't want to do this.

Instead, you probably want to use the expansion:


...which correctly transforms:




...which is the correct form of the samaccountname for an AD computer
account, which is I assume what you're dealing with.
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130816/ae61a152/attachment.html>

More information about the Freeradius-Users mailing list