ntlm_auth "--require-membership-of" breaks eap-conversation

Patrick Machauer machauer at dhbw-mannheim.de
Thu Jul 5 14:13:04 CEST 2012


Yes, i get the Groupname out of the DB :


 Huntgroup-Name := "%{sql:select groupname from radhuntgroup where
nasipaddress=\"%{NAS-IP-Address}\"}"



mysql> select * from radhuntgroup;
+----+---------------------------+----------------+-----------+
| id | groupname | nasipaddress | nasportid |
+----+---------------------------+----------------+-----------+
......
| 5 | adp.realm.de\wlan | 192.168.0.10 | 1 |
| 6 | adp.realm.de\wlan | 192.168.0.11 | 1 |
......
+----+---------------------------+----------------+-----------+
7 rows in set (0.00 sec)



... and it seems to work :



[mschap] expand: --require-membership-of=%{Huntgroup-Name} ->
--require-membership-of=adp.realm.de\wlan



It even doesn't work if i write
--require-membership-of="adp.realm.de\wlan" by hand in the mschap
module.

Mschap says successfull , eap-conversation aborts....




alan buxey <A.L.M.Buxey at lboro.ac.uk> hat am 5. Juli 2012 um 13:38
geschrieben:

> Hi,
>
>
> --require-membership-of="%{Huntgroup-Name}"
>
> ?
>
> alan

Patrick Machauer
Rechenzentrum

Duale Hochschule Baden-Württemberg Mannheim
Baden-Wuerttemberg Cooperative State University Mannheim
Rechenzentrum
Coblitzallee 1-9
68163 Mannheim

Tel.: +49 (0)621 4105 - 1278
Fax: +49 (0)621 4105 - 1278
E-Mail: machauer at dhbw-mannheim.de <mailto:machauer at dhbw-mannheim.de>
Web: http://www.rz.dhbw-mannheim.de <http://www.rz.dhbw-mannheim.de>

[Logo DHBW Mannheim]



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120705/210a348b/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PatrickMachauer.vcf
Type: text/x-vcard
Size: 3894 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120705/210a348b/attachment-0001.vcf>


More information about the Freeradius-Users mailing list