Question on Unlang

Olivier CALVANO o.calvano at gmail.com
Sun Apr 2 09:23:06 CEST 2017


Ok, i put suffix before subrealm and:

[suffix] Looking up realm "network.local" for User-Name = "
marcy at network.local"
[suffix] No such realm "network.local"
++[suffix] = noop
[subrealm] expand: %{Realm} ->
++[subrealm] = noop


It did not succeed to extract the realm no ?




2017-04-02 8:23 GMT+02:00 Peter Lambrechtsen <peter at crypt.nz>:

> You'll need to have "suffix" called first to create the Realm VSA.
>
> On 2/04/2017 17:48, "Olivier CALVANO" <o.calvano at gmail.com> wrote:
>
> > Hi
> >
> > he load it:
> >
> > including configuration file /etc/raddb/modules/subrealm
> >
> >  Module: Linked to module rlm_files
> >  Module: Instantiating module "subrealm" from file
> > /etc/raddb/modules/subrealm
> >   files subrealm {
> >   compat = "cistron"
> >   key = "%{Realm}"
> >   }
> >
> > and after, at each access-request:
> >
> > rad_recv: Access-Request packet from host 172.16.1.1 port 51414, id=86,
> > length=211
> > Proxy-State = 0x5b10bf10
> > User-Name = "marcy at network.local"
> > CHAP-Password = 0x0162b20e59a93138e04d1e5e0a2cde4914
> > CHAP-Challenge = 0xd0a340b8d4f91cb2bdf855403e0f27bb
> > NAS-Identifier = "LOC4156D"
> > NAS-IP-Address = 192.168.1.1
> > NAS-Port = 2533641022
> > NAS-Port-Type = ADSL-DMT
> > Calling-Station-Id = "atm!16/22:8.35"
> > Acct-Session-Id = "FF16033A68044B3E-58E08F2A"
> > Called-Station-Id = "DSL_MAX2"
> > # Executing section authorize from file /etc/raddb/sites-enabled/default
> > +group authorize {
> > [subrealm] expand: %{Realm} ->
> > ++[subrealm] = noop
> >
> >
> > regards
> > Olivier
> >
> > 2017-04-01 10:36 GMT+02:00 Brian Candler <b.candler at pobox.com>:
> >
> > > On 01/04/2017 05:02, Olivier CALVANO wrote:
> > >
> > >
> > > No change, that's don't work.
> > >
> > > How can I display the value of Tmp-String-0  in logs?
> > >
> > > Show your freeradius -X to see where your subrealm module is being
> > invoked
> > > at the time of processing the query (i.e. in the authorize section)
> > >
> > > To debug a variable I usually use
> > >
> > > update {
> > >
> > >     Tmp-String-9 := "%{....expression....}"
> > >
> > > }
> > >
> > > but I expect there's a better way...
> > >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/
> > list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>


More information about the Freeradius-Users mailing list