Altering identity

[Marek Des]

I need to handle to different realms:
1) realm: domain.tld, username: user at domain.tld, EAP + MSCHAPv2 + LDAP
2) realm: empty, username: user, EAP + MSCHAPv2 + LDAP

Do I need to run 2 different virtual servers (2x outer + 2x inner or 1x
outer + 2x inner)?

On Tue, Aug 6, 2019 at 5:17 PM Alan DeKok <aland at deployingradius.com> wrote:

> On Aug 6, 2019, at 10:43 AM, Marek Des <desmarek1 at gmail.com> wrote:
> >
> > What's the recommended way to achieve this?
> >
> > I need to alter outer and inner identity:
>
>   Don't do that.
>
>   Altering the identities will break EAP.
>
> >                        update request {
> >                            Stripped-User-Domain := "${operator_name}"
> >                            Stripped-User-Name := "anon"
> >                        }
> > }
>
>   Setting Stripped-User-Name is fine.
>
> > I am getting  ERROR: EAP-Identity Unknown.
>
>   You can't alter the EAP-Identity field.
>
>   Perhaps you could explain why you think this is necessary.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html