I'm trying to proxy requests to LOCAL, but the realm part of the username isn't stripped.
FreeRADIUS: 20040304 CVS Protocols: EAP-TTLS + PAP User db: files proxying to LOCAL
It is important that users may use only the "[EMAIL PROTECTED]" username instead of just the "username". The configuration I have, works for the "username".
radiusd.conf:
=============
proxy_requests = yes
$INCLUDE ${confdir}/proxy.confmodules {
realm example.domain {
format = suffix
delimeter = "@"
}
}preproxy_users:
===============
DEFAULT
User-Name := `%{Stripped-User-Name:-%{User-Name}}`
proxy.conf: =========== proxy server { synchronous = yes retry_delay = 5 retry_count = 3 dead_time = 120 default_fallback = yes post_proxy_authorize = yes }
realm example.domain {
type = radius
authhost = LOCAL
accthost = LOCAL
}
# nostrip isn't used.. shouldn't this
# strip the domain part ?
# I have no NULL or DEFAULT realm.Log from radiusd -Xxxxxx
========================
[...]
rad_recv: Access-Request packet from host xyz, id=120, length=236
User-Name = "[EMAIL PROTECTED]"
[...]
Thu Mar 4 18:22:18 2004 : Debug: rlm_eap_ttls: Session established. Proceeding to
decode tunneled attributes.
TTLS tunnel data in 0000: 00 00 00 01 40 00 00 1e 73 74 75 64 65 6e 74 35
TTLS tunnel data in 0010: 40 66 64 76 2e 75 6e 69 2d 6c 6a 2e 73 69 00 00
TTLS tunnel data in 0020: 00 00 00 02 40 00 00 0e 31 32 33 34 35 36 00 00
TTLS: Got tunneled request
User-Name = "[EMAIL PROTECTED]"
User-Password = "blah"
FreeRADIUS-Proxied-To = 127.0.0.1
TTLS: Sending tunneled request
User-Name = "[EMAIL PROTECTED]"
User-Password = "blah"
FreeRADIUS-Proxied-To = 127.0.0.1And here is the problem. This should be the "userxy" and not the "[EMAIL PROTECTED]".
I have an odd feeling that request isn't proxied :-/. After the log line: Thu Mar 4 18:12:58 2004 : Info: Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on 1814/udp. string "proxy" doesn't occur anymore.
What am I doing wrong ? I read thru the docs and man pages but can't find the solution, could someone please point me in the right direction ?
-- Best regards, Rok Papez.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

