Strip realm part for bsdauth. This is required and an exmaple usage of

new radius_standard module.

diff --git a/etc/examples/radiusd.conf b/etc/examples/radiusd.conf
index 8dc94cd..00c92eb 100644 (file)
--- a/etc/examples/radiusd.conf
+++ b/etc/examples/radiusd.conf
@@ -1,4 +1,4 @@
-#      $OpenBSD: radiusd.conf,v 1.4 2023/09/18 14:44:21 sobrado Exp $
+#      $OpenBSD: radiusd.conf,v 1.5 2023/09/24 06:09:35 yasuoka Exp $
 
 listen on 0.0.0.0
 #listen on ::
@@ -20,8 +20,12 @@ module load radius "/usr/libexec/radiusd/radiusd_radius"
 module set radius secret "testing123"
 module set radius server "127.0.0.1"
 
+module load strip-realm "/usr/libexec/radiusd/radiusd_standard"
+module set strip-realm strip-atmark-realm true
+
 authenticate *@local {
        authenticate-by bsdauth
+       decorate-by strip-realm
 }
 authenticate *@example.com {
        authenticate-by radius