Most of my users will be able to migrate between different realms, thus I want to force them to use full [EMAIL PROTECTED] string as User-Name.
I found the "notrealm" parameter that is documented as this:
- notrealm:
By default if a realm is matched, it will be proxied to the server
specified. However, if you are using Replication functionality, you
may want to override this behaviour. This option will prevent a
user who enters '[EMAIL PROTECTED]' from being proxied if the 'foobar'
realm configuration contains 'notrealm'. This function used to be
called 'notsuffix', and the old syntax is still supported.However it is never used in rlm_realm module. The behaviour is the same if you specify it or not: the request is not proxied but it is handled LOCALy.
What is the best way to "block" the NULL realm ?
Blocking of any realm would also be very usefull if users from some other realm wouldn't be allowed to log into this network.
-- Lep pozdrav, Rok Papez.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
