Govroam

The Roaming solution for the public sector

User Tools

Site Tools


siteadmin:realm_filtering

This is an old revision of the document!


Basic syntax checking can be done with the 'filter_username' policy. From the FreeRADIUS documents:

#       Filter the username
#
#  Force some sanity on User-Name. This helps to avoid issues
#  issues where the back-end database is "forgiving" about
#  what constitutes a user name.

Example usage:

authorize {
        filter_username
        loop_prevent
        operator-name
        suffix
}

To filter out unwanted realms, such as 'hotmail.com' can be done simply by using the 'realm' command:

## Filter out realms which are empty e.g. Username = fred@
realm "~^$" {
}

## Filter out NULL realms e.g. Username = fred

realm NULL {
}

## Filter out realms that aren't every going to be valid Govroam realms e.g. Username = fred@hotmail.com

realm "~hotmail\\.com$" {
}
siteadmin/realm_filtering.1565690079.txt.gz · Last modified: 2019/08/13 09:54 by admin