Re: Stripped-User-Name Problems (Re: Unmatched ( or \(, and, ?more?broadly, setting Stripped-User-Name)

2011-07-15 Thread Alexander Clouter
Phil Mayers wrote: > >>Unfortunately, when you set nostrip in the config, it doesn't add a >>Stripped-User-Name attribute to the request, but when you unset it, >>rlm_realms adds a Stripped-User-Name attribute and also updates the >>User-Name attribute to the same value. > > I am 90% sure that's

Re: Stripped-User-Name Problems (Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name)

2011-07-15 Thread Phil Mayers
Jacob Dawson wrote: >Unfortunately, when you set nostrip in the config, it doesn't add a >Stripped-User-Name attribute to the request, but when you unset it, >rlm_realms adds a Stripped-User-Name attribute and also updates the >User-Name attribute to the same value. I am 90% sure that's not wh

Re: Stripped-User-Name Problems (Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name)

2011-07-15 Thread Jacob Dawson
On 15 Jul 2011, at 02:51, Alan DeKok wrote: > Jacob Dawson wrote: >> Further testing suggests that neither of the Perl or Realm modules is >> applying the Stripped-User-Name in the right scope. > > I have no idea what that means. The Stripped-User-Name isn't magic. > It's just an attribute.

Re: Stripped-User-Name Problems (Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name)

2011-07-15 Thread Alan DeKok
Jacob Dawson wrote: > Further testing suggests that neither of the Perl or Realm modules is > applying the Stripped-User-Name in the right scope. I have no idea what that means. The Stripped-User-Name isn't magic. It's just an attribute. If it exists in the request list, you can refer to it v

Re: Stripped-User-Name Problems (Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name)

2011-07-14 Thread Jacob Dawson
Further testing suggests that neither of the Perl or Realm modules is applying the Stripped-User-Name in the right scope. Perl does that first thing, when a request comes in, and my output says that as soon as perl is done, it's unset. Similarly, as soon as the hokies realm module is done appl

Stripped-User-Name Problems (Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name)

2011-07-14 Thread Jacob Dawson
So I played with my copy of the code to change what nostrip being unset means (now, it writes the Stripped-User-Name attribute, but no longer rewrites the User-Name attribute with the stripped username), and I'm still running into problems: (0) HOKIES : Looking up realm "hokies" for User-Name =

Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name

2011-07-14 Thread Jacob Dawson
On 14 Jul 2011, at 03:42, Alexander Clouter wrote: > In article <795d5ee4-7536-431e-926a-98e70efa1...@vt.edu> you wrote: > Although to prevent down the road severe levels of pain when enabling > eduroam you should be using something like 'daw...@hokies.vt.edu', could > you not just use 'ntdomain'

Re: Unmatched ( or \(, and, more broadly, setting Stripped-User-Name

2011-07-14 Thread Alexander Clouter
In article <795d5ee4-7536-431e-926a-98e70efa1...@vt.edu> you wrote: > > So, one of my last things here is making sure I can get at the > stripped usernames for my domain users, as they're authorized by their > stripped name, not the name w/ which they're authenticating. Forex, > if I'm using my AD

Unmatched ( or \(, and, more broadly, setting Stripped-User-Name

2011-07-13 Thread Jacob Dawson
So, one of my last things here is making sure I can get at the stripped usernames for my domain users, as they're authorized by their stripped name, not the name w/ which they're authenticating. Forex, if I'm using my AD credentials to log in, User-Name = hokies\dawson, but I'm authorized for W