Adding realm to username

Alan DeKok aland at deployingradius.com
Sat Nov 11 14:20:55 CET 2017


On Nov 11, 2017, at 8:14 AM, Dariusz Nowak <Dariusz.Nowak at dionglobal.com> wrote:
> 
> I'm looking for guidance how to configure following scenario:
> If user came from host XXX (client IP) without specifying realm/domain (so ex. bob instead of bob at mydomain.com) I need to add it to the request. 

  Why?

  If you're doing EAP, this will break EAP.

> I've found many example how to do that in otherway around - so if stripping domain from incoming request.
> 
> Can somebody give me some guidance how I can achieve that? 

  Edit the User-Name attribute:

	update request {
		User-Name := "%{User-Name}@example.com"
	}

> I've had a quick look on config/Proxy and correct me if I'm wrong but I believe this is what I need to use to configure it? It's  just getting little bit blurry when I'm going to "What Happens" section and it mentioning hints.

  The server has a lot of things it can do, but those are usually for specific scenarios.

  For editing the User-Name, just edit the User-Name.  That's what "unlang" is for.

> I'm using FreeRadius 3.0.4-6 on Centos7. 

  Ugh.  You should upgrade to a version released in the last 3 years.

  Alan DeKok.




More information about the Freeradius-Users mailing list