Re: help - PEAP authentication

It will break inside the EAP code, since the EAP code does a sanity=20
check to make sure the EAP Identity matches the User-Name sent by the NAS=
..

--Mike

-----------------------------------
Michael Griego
Wireless LAN Project Manager
The University of Texas at Dallas



Luis Daniel Lucio Quiroz wrote:
> why dont you try this
>=20
> modules {
> ...
>=20
> # 'username@realm'
> #
> realm suffix {
> format =3D suffix
> delimiter =3D "@"
> }
>=20
> }
>=20
>=20
> and then
>=20
> authorize {
> preprocess
> ...
> suffix
> ...
> }
>=20
> It should work onthe whay that DN it's rewrited
>=20
> Letme know if it works for you
> Le Jeudi 28 Avril 2005 21:25, Israel Fabio Alves a =E9crit :
>=20
>>Hi Michael,
>>
>>I will see this with Extreme Networks (Brazil).
>>
>>Thanks for your help.
>>
>>Michael Griego wrote:
>>
>>>Talk to your NAS vendor. That's completely insane for a NAS to rewrit=
e
>>>the User-Name, not to mention a violation of RFC 3579.
>>>
>>>--Mike
>>>
>>>Israel Fabio Alves wrote:
>>>
>>>>Hi,
>>>>
>>>>I need help to solve a problem.
>>>>
>>>>My configuration work 100% with Switch Cisco 2950.
>>>>
>>>>Now I need use Switch from Extreme Networks (Summit 1i), but this
>>>>Switch sent request to Freeradius with this "username@windowsdomain".
>>>>
>>>>I think use attr_rewrite to change the request from this
>>>>"username@windowsdomain" to "windowsdomain\username", but I do not
>>>>find the way to organize the information with attr_rewrite and I do
>>>>not know if this will work for authentication.
>>>>
>>>>Someone have a idea how I solve this.
>>>>
>>>>Very thanks.
>>>>Israel Alves
>>>>
>>>>- List info/subscribe/unsubscribe? See
>>>>http://www.freeradius.org/list/users.html
>>>
>>>- List info/subscribe/unsubscribe? See
>>>http://www.freeradius.org/list/users.html
>=20
>=20
> -=20
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/use=
rs.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html