Subject: Re: realm question
Hi,
> Can I strip the "idm/something/" somehow?
sure. a simple strip in the config would work...
or unlang of course.
eg in radiusd.conf
attr_rewrite copy.user-name {
attribute = Stripped-User-Name
new_attribute = yes
searchfor = ""
searchin = packet
replacewith = "%{User-Name}"
}
attr_rewrite remove-junk {
attribute = Stripped-User-Name
searchfor = "/idm\/something\/"
searchin = packet
new_attribute = no
replacewith = ""
}
then in sites-enabled/default (or usual server) add
copy.user-name
remove-junk
in the authorize section alongside prefix, suffix, ntrealm etc
------------------
Hi Alan,
Thank you for your reply, it worked great with a couple of tweaks. For
those trying to implement the same type of idea, the code works great when
added to the modules/attr_rewrite module instead of in the radiusd.conf
file.
In your sites-available/whatever, the order of the processing is important.
I have a realm setup to strip off after the @domain, but if the attr_rewrite
modules are called before the suffix module, the suffix module will not pass
the stripped-user-name that was required in my case, it will pass the whole
[EMAIL PROTECTED] as the username.
If you place the rewrite modules names after the suffix, everything works
great.
Cheers,
Jeff.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
