Hi Remi, If you want to use the realm, why not using the DOMAIN\\ or @DOMAIN part of the username? If you are logging using full domain credentials, (ie. DOMAIN\\username or usern...@domain.tld), you should already have this information in vlan::custom. Use some regex on the value.
Let me know if this helps. On 12-05-31 9:19 AM, Olivier Bilodeau wrote: > Hi Rémi! > > On 05/31/2012 07:22 AM, remi.desgra...@telecom-bretagne.eu wrote: >> Hi everyone, >> >> I use PacketFence for wired connexion with PortSecurity (Cisco) and >> for wireless with mac authentication. >> >> I authenticate user through a external RADIUS (but I'm using internal >> freeradius for wireless mac authentication) and this radius' conf is >> like that : >> >> >> DEFAULT Airespace-Wlan-Id == 10,Realm =~ "mydomain.com|NULL" >> Tunnel-Type:1 = VLAN, >> Tunnel-Medium-Type:1 = IEEE-802, >> Tunnel-Private-Group-ID:1 = "MyProdVlan", >> Fall-Through = no >> >> So I read pf::vlan::custom doc, and I clear now, but, can I collect >> realm attributes ? > > What do you mean by collect realm attributes? Collect where? For whom? > > I don't understand what you are trying to accomplish... Maybe a little > ascii drawing.. > > Cheers! -- Francois Gaudreault, ing. jr fgaudrea...@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ PacketFence-devel mailing list PacketFence-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-devel
