[RADIATOR] Reject empty username?

Heikki Vatiainen hvn at open.com.au
Thu Mar 5 18:14:03 UTC 2020


On 2.3.2020 17.17, Robert Blayzor wrote:
> That works, but is there a way to compare the username part WITHOUT the
> realm?
> 
> The problem is, we're seeing auth requests come in with an empty username..
> 
> If we compare the above we'll still see the @realm and it will still log
> the empty part...

This should match requests that start with a character other than @. If 
the username is zero length, it does not match because the match 
requires at least one character.

<Handler Request-Type = Accounting-Request, User-Name = /^[^@]/>
    ...
</Handler>
#
<Handler>
    AccountingHandled
</Handler>

> On 2/3/20 11:25 AM, Robert Blayzor wrote:
>> Would something like this work:
>>
>> <Handler Request-Type = Accounting-Request, User-Name = /^.+/>
>>     ...
>> </Handler>
>> #
>> <Handler>
>>     AccountingHandled
>> </Handler>
>>
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator
> 

-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, TACACS+, PAM, Active Directory,
EAP, TLS, TTLS, PEAP, WiMAX, RSA, Vasco, Yubikey, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, etc.


More information about the radiator mailing list