winbind / ntlm_auth funny

[Matthew Newton]

On Thu, 2018-01-18 at 10:47 +0000, Alex Sharaz via Freeradius-Users
wrote:
> I've been using winbindd for a long time to authenticate york users
> .. and it "just works"

Good to know.

> with
> 
>  winbind_username = "%{Stripped-User-Name}"
>         winbind_domain = "HYMS.AC.UK"
> 
> plus a few other bits to get inner-tunnel to call mschap_hyms as
> appropriate

OK.

> ntlm_auth --username=eduroamtest2 --domain=HYMS.AC.UK
> 
> and get the same no such user message
> 
> However, try
> ntlm_auth --username=\eduroamtest2 --domain=HYMS.AC.UK
> 
> and get a success after entering a password.

That's... weird.

> Thought I'd go back to using ntlm_auth in my FR config for HYMS
> So how do I prefix Stripped-user-name wtih a "\"  in inner-tunnel ?

Use

  winbind_username = "\\%{Stripped-User-Name}"

?

-- 
Matthew