trying to get an ACK for a computone intelliserver

Alan DeKok aland at deployingradius.com
Tue Jun 23 21:25:57 CEST 2020


Pn Jun 23, 2020, at 2:25 PM, The Doctor via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> Script started on Tue Jun 23 12:12:11 2020
> You have mail.
> root at doctor:~ # /usr/freerad3/sbin/radiusd -X -sx

  So... you're not following the documentation, despite REPEATED instructions to do so.

> Tue Jun 23 12:12:40 2020 : Debug:   update {
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Serial}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Expiration}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Subject}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Issuer}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Common-Name}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Subject-Alt-Name-Email}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Serial}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Expiration}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Subject}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Issuer}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Common-Name}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Subject-Alt-Name-Email}"
> Tue Jun 23 12:12:40 2020 : Debug:   }

  I have no idea why you uncommented that.  It doesn't do anything useful.

> Even if the usrname/password is correct, the NAS is not getting 
> clearance to continue.  What bridge needs to built?

  You're making random changes to the config, and failing to follow the documentation.

  Can you explain why you think it's important for you to not follow the documentation?

  Can you explain why you ask for help, and then ignore our advice?

  Alan DeKok.




More information about the Freeradius-Users mailing list