Time for action – defining the realm
The following steps demonstrate how to define a realm:
- Add the following realm to the
proxy.conf
file located under the FreeRADIUS configuration directory:realm my-org.com { }
- Restart the FreeRADIUS server in debug mode and authenticate as
alice@my-org.com
. Observe the output of the FreeRADIUS server. The following should be part of the output:[suffix] Looking up realm "my-org.com" for User-Name = "alice@my-org.com" [suffix] Found realm "my-org.com" [suffix] Adding Stripped-User-Name = "alice" [suffix] Adding Realm = "my-org.com" [suffix] Authentication realm is LOCAL. ++[suffix] returns ok
- Edit the
my-org.com
realm to include thenostrip
directive:realm my-org.com { nostrip }
- Restart the FreeRADIUS server in debug mode and authenticate as
alice@my-org.com
. Observe the output of the FreeRADIUS server. Authentication should fail and the following should be part of the output:[suffix] Looking up...