anonymous user when proxying

Phil Mayers p.mayers at imperial.ac.uk
Wed Feb 13 16:46:22 CET 2013


On 13/02/13 14:46, Hocine M wrote:
> Hi,
>
> Some user who are proxied (eduroam) are acconted with username =
> anonymous at realm

Yes

> I don't want to have  anonymous user in my database, do i have to reject
> anonymous users in post-proxy section or there is something to do to
> force user to use inner identity?

No. Anonymous or empty outer ID is perfectly legal, and IIRC you'll be 
in contravention of the eduroam spec if you block this. If fact, empty 
outer ID is best-practice, and you'll drop a lot of people if you block it.

What are you trying to achieve?


More information about the Freeradius-Users mailing list