Using machine auth from a remote eduroam site

[Isaac Boukris]

On Tue, Mar 27, 2018 at 6:51 PM, Alex Sharaz <alex.sharaz at york.ac.uk> wrote:
> Well its getting better,
> I now get
>
> Tue Mar 27 16:34:46 2018 : Auth: (24212) Login incorrect (Home Server
> says so):[host/dpslap001.its.york.ac.uk] (from client yorkcc port 178
> cli 80-86-F2-E0-7D-24)
> Tue Mar 27 16:34:46 2018 : Auth: (24212) Login incorrect:
> [host/dpslap001.its.york.ac.uk] (from client yorkcc port 178 cli
> 80-86-F2-E0-7D-24)
>
> Before I got  a no such user, now I'm getting a login incorrect
>
> Changes made were
>         winbind_username = "%{%{Stripped-User-Name}:-%{%{User-Name}:-00}}"
>         winbind_domain = "%{%{mschap:NT-Domain}:-ITS.YORK.AC.UK}"
>
> A
>
>
> On 27 March 2018 at 03:05, Isaac Boukris <iboukris at gmail.com> wrote:
>> On Mon, Mar 26, 2018 at 8:03 PM, Alex Sharaz via Freeradius-Users
>> <freeradius-users at lists.freeradius.org> wrote:
>>> Currently using
>>>
>>>         winbind_username = "%{Stripped-User-Name}"
>>>         winbind_domain = "ITS.YORK.AC.UK"


BTW, the default configuration is:
winbind_username = "%{mschap:User-Name}"

This pulls out the first fqdn component and appends a dollar sign at
the end - so it may help.