Artur Hecker <[EMAIL PROTECTED]> wrote:
> using FreeRADIUS Version 1.0.0-pre0, for host , built on Mar 26 2004 we
> currently experience accounting user-name problems with both cisco APs
> 1100 and 1200.
>
> first of all, the following config directive:
...
> does not seem to change anything in my case, in the Access-Accept
> message sent by the server, the User-Name is still set to "anonymous".
Try instrumenting the server, to see if the user-name is set inside
of the tunnel.
> the problem is that we do not use the users file at all. our users are
> rather stored in a remote SQL data base and I would like to add
> something like a generic User-Name = %{User-Name} to the reply... but
> when i add this to the SQL data base, the server takes this "as is" and
> does not expand the variable (the access accept is sent for the
> non-existent user called '%{User-Name}'.
Ah, yes. The SQL module doesn't do dynamic expansion. It probably
should...
In fact, the entire server should probably do that automatically.
> what can/should i do to have the tunneled user-name in the access-accept
> in my case? we tried the expr but that didn't work out...
You should be able to have a post-auth module re-write the
username...
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
