rlm_realm(5)

🌸 NAME 🌸

rlm_realm(5) is the page for rlm_realm, aka the FreeRADIUS Module that handles realms. Bestie, it's giving "split the username, find the realm, keep it cute" energy ✨

---

💖 DESCRIPTION 💖

The rlm_realm module parses the User-Name attribute into a User section and a Realm section. This is used primarily in a proxy situation, but Realms can also be used locally to provide different service profiles based on the Realm being used. No cap, that's the whole vibe 🫶

The main configuration items to be aware of are:

• format — This can be either 'prefix' or 'suffix'. It specifies whether the Realm is before or after the User portion in the User-Name string.
• delimiter — A single character in quotes, which is used as the delimiting character that separates the Realm and User sections of the string.
• ignore_default — This is set to either 'yes' or 'no'. If set to 'yes', this will prevent the module instance from matching a realm against the DEFAULT entry. This may be useful if you have multiple realm module instances. The default is 'no'.
• ignore_null — This is set to either 'yes' or 'no'. If set to 'yes', this will prevent the module instance from matching a realm against the NULL entry. This may be useful if you have multiple realm module instances. The default is 'no'.

This module parses the realm from the User-Name attribute according to the instance configuration, and then performs a lookup to find a matching realm in the /etc/raddb/proxy.conf file. Depending on the configuration of the Realm as matched in the file, the username may be rewritten in a 'stripped' format, or with the Realm portion removed. In either case, a Realm attribute is created and added to the packet on a match, which can be used by other modules. Periodt 💅

---

🎀 CONFIGURATION 🎀

Here's the config moment, bestie — keep it exactly like this:

modules {
  ... stuff here ...
  # useranme@realm syntax
  realm suffix {
    format = suffix
    delimiter = "@"
  }
   # realm/username syntax
   realm prefix {
    format = prefix
    delimiter = "/"
  }
  ... stuff here ...
}

---

✨ SECTIONS ✨

This module shows up in these sections: authorization, pre-accounting. Slay 🌈

---

🦋 FILES 🦋

• /etc/raddb/radiusd.conf
• /etc/raddb/proxy.conf

---

🌈 SEE ALSO 🌈

Go read these too, iykyk:

• radiusd(8)
• radiusd.conf(5)
• proxy.conf(5)

---

👑 AUTHORS 👑

Shoutout to Chris Parker, cparker@segv.org. Iconic 🎀

---

💖 That's the whole page, bestie! Cute little sign-off: this came from the FreeRADIUS Module source/version, dated 14 March 2004, and the page is rlm_realm(5). Slay and goodbye! ✨💅