On 7.1.2022 18.08, Ullfig, Roberto Alfredo wrote:
Wait no that won't work. I assume Realm= is looking for everything after
the @ symbol so how about this?
>
<Handler ConvertedFromEAPMSCHAPV2=1, Realm=/^\z|^uic\.edu\z/i>
Here's one more. Now it's clear that the whole User-Name is considered
and there's no reason to think realm as a separate thing:
# One or more non-@ characters followed by @uic.edu once or not at all
<Handler ConvertedFromEAPMSCHAPV2=1, User-Name=/^[^@]+(@uic\.edu)?\z/i>
RewriteUsername s/^([^@]+).*/$1/
<AuthBy SUSPEND>
Dir /mnt/global/authinfo/campus_suspend
</AuthBy>
<AuthBy SUSPEND>
Dir /mnt/global/authinfo/campus_delete
</AuthBy>
<AuthBy WIRELESS>
Dir /mnt/global/authinfo/wireless
</AuthBy>
<AuthBy NTLM>
DefaultDomain AD
</AuthBy>
<AuthLog SYSLOG>
LogSuccess 1
LogFailure 1
Facility local0
SuccessFormat %T : '%U' from %N
mac=%{OuterRequest:Calling-Station-Id} -- Authentication OK
FailureFormat %T : '%U' from %N
mac=%{OuterRequest:Calling-Station-Id} -- Authentication FAILED
</AuthLog>
</Handler>
<Handler ConvertedFromEAPMSCHAPV2=1>
<AuthBy INTERNAL>
DefaultResult REJECT
</Handler>
</Handler>
--
Heikki Vatiainen
OSC, makers of Radiator
Visit radiatorsoftware.com for Radiator AAA server software
_______________________________________________
radiator mailing list
[email protected]
https://lists.open.com.au/mailman/listinfo/radiator
