Stripping The Domain Name - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

JUNOSe 11.0.x Broadband Access Configuration Guide

Stripping the Domain Name

The router provides feature that strips the domain name from the username before
it sends the name to the RADIUS server in an Access-Request message. You can
enable or disable this feature using the strip-domain command.
By default, the domain name is the text after the last @ character. However, if you
changed the domain name parsing using the aaa delimiter, aaa parse-order, or aaa
parse direction commands, the router strips the domain name and delimiter that
result from the parsing.
aaa delimiter
aaa parse-direction
14
Setting Up Domain Name and Realm Name Usage
Use to configure delimiters for the domain and realm names. Specify one of the
following keywords:
domainName Configures domain name delimiters. The default domain
name delimiter is @.
realmName Configures realm name delimiters. The default realm name
delimiter is NULL (no character). In this case, realm parsing is disabled
(having no delimiter disables realm parsing).
You can specify up to eight delimiters each for domain name and realm name.
Example
host1(config)#aaa delimiter domainName @*/
Use the no version to return to the default.
See aaa delimiter
Use to specify the direction the router uses to parse the username for the domain
or realm name.
domainName Specifies that the domain name is parsed. The router
performs domain parsing from right to left by default.
realmName Specifies that the realm name is parsed. The router performs
realm parsing from left to right by default.
left-to-right Router searches from the left-most character. When the router
reaches a realm delimiter, it uses anything to the left of the delimiter as the
domain. When the router reaches a domain delimiter, it uses anything to
the right of the delimiter as the domain.
right-to-left Router searches from the right-most character. When the
router reaches a realm delimiter, it uses anything to the left of the delimiter
as the domain. When the router reaches a domain delimiter, it uses anything
to the right of the delimiter as the domain.
Example
host1(config)#aaa parse-direction domainName left-to-right