Masquerading MSCHAPv2 User-Name?

Alan DeKok aland at deployingradius.com
Sat Feb 20 12:23:28 CET 2021



> On Feb 20, 2021, at 2:23 AM, David Herselman via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> Hi,
> 
> On a related note, it occurred to me that I should most probably be sanitising incoming attributes? If the request arrived with sAMAccountName it would then override what I'm setting...

  That attribute isn't in the default dictionaries.  If you added it to raddb/dictionary, then read the comments in that file.  Attributes following those guidelines will never appear in a RADIUS packet.

  Alan DeKok.




More information about the Freeradius-Users mailing list