Govroam

The Roaming solution for the public sector

User Tools

Site Tools


siteadmin:clearpass_-_setting_realm_filters

Clearpass - Setting Realm Filters

There are several types of filtering that can be done.

  • Syntax
  • Known bad realms
  • Typos

Syntax Filtering

This is the easiest and captures the most problematic Username string. Simple types such as @@, .. or illegal characters such as commas or underscores.

Use a regex to match a good realm.

  • In the Service which proxies unknown requests to the NRPS
  • Enter 'RADIUS:IETF' for the Type
  • User-Name for the Name
  • MATCHES_REGEX for the Operator
  • ^[^@]*@([a-zA-Z0-9-]+\.)+[a-zA-Z]{2,6}$ for the Value

Known Bad Realms

We keep a list of known bad realms in the Govroam FAQ.

  • In the Service which proxies unknown requests to the NRPS
  • Select <em>Matches ALL of the Following Conditions</em>
  • Add lines for each Realm where
    • Type is 'RADIUS:IETF'
    • Name is 'User-Name'
    • Operator is 'CONTAINS'
    • Value is the realm e.g. '@hotmail.com'.

Typos

These are harder to do as they require spotting and adding each in turn. You can use your logs to see which realms are being sent up to the NRPS and then decide which are typos for the realm(s) you look after locally. This is also a good way to help users who are having problems.

  • In the Service which proxies unknown requests to the NRPS
  • Select <em>Matches ALL of the Following Conditions</em>
  • Add lines for each Realm where
    • Type is 'RADIUS:IETF'
    • Name is 'User-Name'
    • Operator is 'CONTAINS'
    • Value is the realm e.g. '@halby.nit'.
siteadmin/clearpass_-_setting_realm_filters.txt · Last modified: 2023/03/14 14:12 by admin