eap sim authorization problem

Phil Mayers p.mayers at imperial.ac.uk
Thu May 30 11:08:32 CEST 2013


On 30/05/13 08:16, Iliya Peregoudov wrote:
> You should designate realm wlan.mnc001.mcc510.3gppnetwork.org as locally
> served in raddb/proxy.conf:

Better yet, don't use the "suffix" module; look for the realm and strip 
it yourself:

authorize {
   if (User-Name =~ /^(.*)@(.+)$/) {
     update request {
       Stripped-User-Name := "%{1}"
       Realm := "%{2}"
     }
   }
}

See the policy.conf/policy.d and list archives for better regexps for 
NAI-style usernames.


More information about the Freeradius-Users mailing list