reply-attributes are not set in the ACCES-ACCEPT

Alex Mija alexandru.mija at alcatel-lucent.ro
Fri May 9 09:29:01 CEST 2008


Hello,
I try to authenticate (using freeradius 102)to a freeradius server . My user
entry in the users file looks like this:

user2   User-Password := "alcatel"
     Session-Timeout = 3600,
     Termination-Action = 1,
#        Class = 0x1234567890,
#        User-Name = "accounting",
     Service-Flow-Descriptor =
0x000104008302040083040303050304060301070383080384,
     QoS-Descriptor += 0x000103830403020606000F40000c0302,
     QoS-Descriptor += 0x000103840403020606001F40000c0302

When I use TTLS with  CHAP  it works fine.
BUT When I use TTLS with MSCHAPv2 in ACCESS-ACCEPT message I can't see any
of the attributes I set in the reply list of items from the users file.

Here is the ACCESS-ACCEPT I get for TTLS with CHAP:
Sending Access-Accept of id 5 to 10.10.10.30:36608
     Session-Timeout = 3600
     Termination-Action = RADIUS-Request
     Service-Flow-Descriptor =
0x000104008302040083040303050304060301070383080384
     QoS-Descriptor += 0x000103830403020606000f40000c0302
     QoS-Descriptor += 0x000103840403020606001f40000c0302
     MS-MPPE-Recv-Key =
0x8a3b613e1d64e0a0336d2e60e2fb0632b6a43cc6b3d5d2b4e5567d1a96192ce4
     MS-MPPE-Send-Key =
0x6e80df49b3c1508922184f681e1ce50d92c8be285caffd8ade63819b62a39f71
     EAP-Message = 0x03b80004
     Message-Authenticator = 0x00000000000000000000000000000000
     User-Name = "anonymous"
     State = 0x2c1b82994bd0419cabdcaf1926213bd5
Finished request 4

And here is the ACCESS-ACCEPT I get for TTLS with MSCHAPv2:
Sending Access-Accept of id 5 to 10.10.10.40:42816
     MS-MPPE-Recv-Key =
0x1da9c1c1e531f3196e83dfc1916b5b3a86b495ab8e2af29713c599be4bdfbbfd
     MS-MPPE-Send-Key =
0xe1059cf8c3c43acb40917d40d11f75b38d3ebcdd7ff3c8ce50555cfed46e286b
     EAP-Message = 0x03c20004
     Message-Authenticator = 0x00000000000000000000000000000000
     User-Name = "anonymous"
     State = 0x84615d95aae822404e0a3e27f174ea81
Finished request 4

Could anyone tell me why in the second case the reply attributes are not
included in ACCESS-ACCEPT?

Regards,
Alex




More information about the Freeradius-Users mailing list