[RADIATOR] User-Name is empty in reply

Markus Ludwig Grandpre markus.grandpre at uni-konstanz.de
Thu Sep 15 06:09:13 CDT 2011


Thank you, Heikki. It works.

Markus

On 09/15/2011 12:45 PM, Heikki Vatiainen wrote:
> On 09/15/2011 01:21 PM, Markus Ludwig Grandpre wrote:
> 
> Hello Markus,
> 
>> when performing inner authentication User-Name attribute value is always
>> empty in reply:
> 
> Try %x or %X for EAP Identity instead. There may not be a User-Name
> RADIUS attribute in the EAP inner authentication, so your option is to
> try the EAP Identity.
> 
> Actually EAPAnonymous setting does affect things here, but %x or %X may
> still be better options to use.
> 
>> Code:       Access-Accept
>> Identifier: 14
>> Authentic:  <212>[#<152><3><140><169><207>;U;<217>gM<190><8>
>> Attributes:
>>         User-Name = ""
>>         EAP-Message = <3><7><0><4>
>> ...
>>
>> Format of incomming username and suggested User-Name format in reply is:
>>
>>   x.y at realm
>>
>> AuthBy definition is:
>>
>> <AuthBy LDAP2>
>>   ...
>>   UsernameAttr			cn
>>   UsernameMatchesWithoutRealm
>>   ...
>>   AddToReply             	User-Name=%U
>>   EAPType			MSCHAP-V2
>>   ...
>>  </AuthBy>
>>
>>
>> Can you please explain to me why %U (also %u and %n) is empty.
>> Markus
>> _______________________________________________
>> radiator mailing list
>> radiator at open.com.au
>> http://www.open.com.au/mailman/listinfo/radiator
> 
> 


More information about the radiator mailing list