Charles Williams | 11 Aug 2012 13:11

PPTP/PPP/Radius/LDAP and usernames in email format

Hey all,

Heres's one for you. I am currently setting up a new MS-ChapV2/MPPE VPN 
gateway with pptp/ppp to freeradius authing against an LDAP store.

This VPN will be used for multiple client domains and so I would like to 
use usernames in the form of „user <at> domain.tld <mailto:user <at> domain.tld>“ 
instead of „user“ (which is the situation atm).

The LDAP store has a branch as follows:

ou=domains,dc=company,dc=com

under ou=domains I have entries for each domain that I will be offering 
VPN access to.

ie. cn=domain.tld,ou=domains,dc=company,dc=com

I would like to get ppp to send the complete user <at> domain.tld 
<mailto:user <at> domain.tld> to radius and have radius use the „domain.tld“ 
as part of the filter for the username search to limit the search to the 
sub-branch from the correct domain.

The problem is that I have yet to find a way to get ppp to send the 
username to Freeradius if there is an  <at>  symbol in the username.

Any ideas?

thanks,
chuck
(Continue reading)


Gmane