Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.
| Obě strany předchozí revize Předchozí verze | Následující verze Obě strany příští revize | ||
|
cs:spravce:pripojovani:radius:freeradius3 [2018/06/26 15:58] jan.tomasek@cesnet.cz |
cs:spravce:pripojovani:radius:freeradius3 [2018/07/27 09:51] machv@cesnet.cz |
||
|---|---|---|---|
| Řádek 172: | Řádek 172: | ||
| filter_inner_identity { | filter_inner_identity { | ||
| ... | ... | ||
| - | if (&outer.request:User-Name =~ /@([^@]+)$/) { | + | if (&outer.request:User-Name != &User-Name) { |
| - | update request { | + | # |
| - | Outer-Realm-Name = "%{1}" | + | # Get the outer realm. |
| - | } | + | # |
| + | if (&outer.request:User-Name =~ /@([^@]+)$/) { | ||
| + | update request { | ||
| + | Outer-Realm-Name = "%{1}" | ||
| + | } | ||
| - | # | + | # |
| - | # When we have an outer realm name, the user portion | + | # When we have an outer realm name, the user portion |
| - | # MUST either be empty, or begin with "anon". | + | # MUST either be empty, or begin with "anon". |
| - | # | + | # |
| - | # We don't check for the full "anonymous", because | + | # We don't check for the full "anonymous", because |
| - | # some vendors don't follow the standards. | + | # some vendors don't follow the standards. |
| - | # | + | # |
| - | + | if (&outer.request:User-Name !~ /^anonymous@/) { | |
| - | # eduroam.cz: What vendors? | + | update request { |
| - | + | Module-Failure-Message = "User-Name is not anonymized" | |
| - | if (&outer.request:User-Name !~ /^anonymous@/) { | + | } |
| - | update request { | + | reject |
| - | Module-Failure-Message = "User-Name is not anonymized" | + | } |
| - | } | + | } |
| - | reject | + | |
| - | } | + | |
| ... | ... | ||
| </file> | </file> | ||
CESNET, z. s. p. o.
Generála Píky 26
160 00 Praha 6
info@cesnet.cz
Tel: +420 234 680 222
GSM: +420 602 252 531
support@cesnet.cz