(RADIATOR) Copying inner username to Access-Accept for correct accounting

Rok Papez rok.papez at arnes.si
Thu Jul 5 09:59:19 CDT 2007


Hello dear Radiator users!

Some EAP protocols use outer identity only to locate a home RADIUS server
and thus users use anonymous outer identity (anonymous at domain.tld or just
@domain.tld as recommended by the RFC 4282)

Attached script copies the inner username to the Access-Accept User-Name field so
a NAS (Access Point) can provide accounting information with correct (inner)
User-Name.

This, new version of the script also handles the RFC 4282 @domain.tld outer
identities correctly.

Example configuration:

<Handler Realm=domain.tld>
        RewriteUsername s/^([^@]+).*/$1/
        AuthBy static_users
        PostProcessingHook file:"/home/radius/etc/eap_acct_username.pl"
</Handler>

-- 
Best regards,
Rok Papež
ARNES, Jamova 39 p.p. 7, SI-1001 Ljubljana, Slovenia
tel: +386 1 479 88 00, fax: +386 1 479 88 78
-------------- next part --------------
A non-text attachment was scrubbed...
Name: eap_acct_username.pl
Type: application/x-perl
Size: 857 bytes
Desc: not available
URL: <http://www.open.com.au/pipermail/radiator/attachments/20070705/effbb908/attachment.bin>


More information about the radiator mailing list