(RADIATOR) EAP inner identity hook

[Hugh Irvine]

Hello Andrew -

You can set "EAPAnonymous %0" in the AuthBy of your outer Handler to  
use the identity as the username in the inner request.

See section 5.18.24 in the Radiator 4.2 reference manual ("doc/ 
ref.pdf") and the example in "goodies/eap_peap.cfg".

regards

Hugh


On 23 May 2008, at 04:48, Andrew D. Clark wrote:

> I'm getting user sessions and accounting information showing the  
> EAP anonymous
> identity from my NAS when using EAP-PEAP.  My vendor suggested  
> sending the
> inner username (the "real" one) in the access-accept.  I tried  
> using the
> contributed hook 'eap_acct_username.pl' without success.  I  
> modified the hook
> slightly to copy the inner username to the access-accept message, but
> might've done so in a bad way (it works, but is it correct?)
>
> sub {
>         my ($req, $rep, $handled, $reason) = @_;
>
>         if (${$rep}->code() eq 'Access-Accept' ) {
>
>    		my $inner_identity = ${$req}->{rp}{inner_identity};
>
>         	 ${$rep}->changeUserName($inner_identity) if defined  
> $inner_identity;
> 	}
> }
>
> Is there a defined method for grabbing the inner_identity other  
> than ripping
> it out of the guts of the poor request object?
>
> -- 
> Andrew D. Clark
> Network Operations Engineer 	
> University of Minnesota, Networking/Telecom Services 	
> 2218 University Ave SE
> Minneapolis, MN 55414-3029
> Phone: 612-626-4880
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.