Re: Matching realm in a connection policy

Tech-Archive recommends: Fix windows errors by optimizing your registry



Chris

Are you sure that IAS is getting the user name in user@domain format? Or
does it get it in domain\user format? I would suggest that you try a
netmon/ethereal capture on your RADIUS packet and then formulate your
username manipulation rule. If you attach your netmon capture someone on the
newsgroup can take a look.
(try a generic matching syntax ^.*abc.*$ and see if that works?).

Thanks, Manju

--
+++++++++++++++++++++++++++++++++++++++++++++++
This posting is provided "AS IS" with no warranties, and confers no rights


"Chris Hills" <chills@xxxxxxxxxxxxxx> wrote in message
news:ei4nvwoaFHA.2900@xxxxxxxxxxxxxxxxxxxxxxx
> Hi
>
> I would like to do the following with IAS on Windows Server 2003
>
> 1. If the realm is abc.domain.edu, forward the request to remote RADIUS
> server group "abc".
>
> 2. If the realm is def.domain.edu, forward the request to remote RADIUS
> server group "def".
>
> 3. If the realm is anything else, forward the request to remote RADIUS
> server group "xyz".
>
> I have tried creating a connection request policy where User-Name matches
> "*@abc.domain.edu" and so on, but this does not seem to work. There is no
> attribute listed for realm, so I have no idea how else to achieve it.
>
> Regards
>
> --
> Chris Hills
> IT Services
> North East Worcestershire College


.