How does Stripped-User-Name get evaluated?
Nick Howitt
nick at howitts.co.uk
Tue Apr 17 15:59:38 CEST 2018
I am doing an ldap lookup with /etc/raddb/mods-available/ldap:
user {
base_dn = "${..base_dn}"
filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})"
It comes back correctly with a simple username, but with a Domain
username such as "test/MINI-1.CLEARSYSTEM" it always tries to look up
user "test/MINI-1.CLEARSYSTEM".
Changing
filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})"
to
filter = "(uid=%{Stripped-User-Name})"
looks up a blank user and
filter = "(uid=%{User-Name})"
looks up user "test/MINI-1.CLEARSYSTEM" which fails.
I think I am thinking is the function creating Stripped-User-Name is not
being called. If so, how can I fix it?
Thanks,
Nick
More information about the Freeradius-Users
mailing list