Re: Blank's in Usernames (fwd)

Dietmar Stommel (dstommel@netcologne.de)
Mon, 30 Jun 1997 14:00:57 +0200 (CEST)

> Once upon a time Dietmar Stommel shaped the electrons to say...
> >When i dial in with my real username plus blank's plus a string, and the
> >correct password, i get full access. But with the wrong username.
>
> Yes, this is normal.
>
> >Username in /etc/passwd: "test01"
> >Dial in with Username: "test01 123"
>
> RADIUS terminates usernames on ANY whitespace. So all RADIUS is checking
> is 'test01'.

That means, RADIUS terminates usernames on ANY whitespace before check the
auth. , but it send back the unterminated usrename to our MAX 4000 ! And
so USER "test01" never log in, but he did, with a wrong Username ! And we
have a problem with accounting !

>
> -MZ
> --
> Livingston Enterprises - Chair, Department of Interstitial Affairs
> Phone: 800-458-9966 510-737-2100 FAX: 510-737-2110 megazone@livingston.com
> For support requests: support@livingston.com <http://www.livingston.com/>
> Snail mail: 4464 Willow Road, Pleasanton, CA 94588
>