Hi.

I have a setup with multiple NAS's where each NAS belongs to a different owner.
All of them talk to the same radius server where users are stored in MySQL 
database.
AFAIK normally realms are used to strip e.g. domain names from the login user 
names, e.g [EMAIL PROTECTED] authenticating against a radius server will get 
the domain.tld part "taken off" the login name and only the userXYZ part will 
be used for authentication
I was wondering if it could be possible to do that the other way around, to 
store usernames in MySQL as [EMAIL PROTECTED] and then add the @domain.tld 
realm to the 'userXYZ' when the user sends authentication request.
In that case I believe the NAS would have to add the specified @domain.tld part 
to the username.
Or is there maybe a trick that can be done so if the unique userXYZ part of the 
[EMAIL PROTECTED] is avaliable in the database, the realm would be 
automatically added and the user authenticated ?
My NAS servers run RouterOS from Mikrotik.

Regards,
M. Jessa
http://www.yazzy.org


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to