Transformation of the + symbol -- FRS 3.0.11

[Mark Williams]

I should mention that I have a few machines still running on FRS 3.0.4, with the same ldap config and filter, and this user is returned correctly during those auth requests.



________________________________
From: Mark Williams <martialstudy at hotmail.com>
Sent: Tuesday, October 18, 2016 10:44 AM
To: FreeRadius users mailing list
Subject: Transformation of the + symbol -- FRS 3.0.11


Any idea why the + symbol is being transformed in the ldap filter? Should I be using a different syntax for the attribute substitution?

(12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Checking for suffix after "@"
(12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Looking up realm "vt.edu" for User-Name = "adp+ipad at vt.edu"
(12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Found realm "~vt.edu$"
(12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Adding Stripped-User-Name = "adp+ipad"
(12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Adding Realm = "vt.edu"
(12813372) Tue Oct 18 10:08:33 2016: Debug: suffix: Authentication realm is LOCAL
(12813372) Tue Oct 18 10:08:33 2016: Debug:       [suffix] = ok
(12813372) Tue Oct 18 10:08:33 2016: Debug:       update control {
(12813372) Tue Oct 18 10:08:33 2016: Debug:       } # update control = noop
(12813372) Tue Oct 18 10:08:33 2016: Debug: eap: Peer sent EAP Response (code 2) ID 12 length 74
(12813372) Tue Oct 18 10:08:33 2016: Debug: eap: No EAP Start, assuming it's an on-going EAP conversation
(12813372) Tue Oct 18 10:08:33 2016: Debug:       [eap] = updated
(12813372) Tue Oct 18 10:08:33 2016: Debug:       [files] = noop
(12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(12813372) Tue Oct 18 10:08:33 2016: Debug: ldap:    --> (uid=adp\5c2bipad)
(12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: Performing search in "ou=People,ou=NIS,o=vt" with filter "(uid=adp\5c2bipad)", scope "sub"
(12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: Waiting for search result...
(12813372) Tue Oct 18 10:08:33 2016: Debug: ldap: Search returned no results
(12813372) Tue Oct 18 10:08:33 2016: Debug:       [ldap] = notfound

<http://aka.ms/weboutlook>