<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<div class="moz-signature"><font size="2"><br>
Regards,
<br>
<b>Amr el-Saeed</b>
<br>
Senior Systems Engineer
<br>
<img moz-do-not-send="false"
src="cid:part1.08020703.08090403@tedata.net" alt="Signature"><br>
94 Tahrir St., Maghraby Plaza, <br>
Dokki, Giza 12311, Egypt <br>
T: +20 (2) 33 32 0700 | Ext: 1107
<br>
F: +20 (2) 33 32 0800 | <br>
E: <a class="moz-txt-link-abbreviated" href="mailto:amr.elsaeed@tedata.net">amr.elsaeed@tedata.net</a>
<br>
<a class="moz-txt-link-abbreviated" href="http://www.tedata.net">www.tedata.net</a>
<br>
<img moz-do-not-send="false"
src="cid:part2.08040606.05030109@tedata.net" alt="Signature" p=""></font></div>
<br>
<br>
Alan DeKok wrote:
<blockquote cite="mid:4AB1F3DF.3060605@deployingradius.com" type="cite">
<pre wrap="">Amr el-Saeed wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I am using freeradius 1.1.7
</pre>
</blockquote>
<pre wrap=""><!---->
Ugh. Upgrade.
</pre>
</blockquote>
I will <br>
<blockquote cite="mid:4AB1F3DF.3060605@deployingradius.com" type="cite">
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">i want to check an attribute come in the Access request ,named
Cisco-AVPair , i could do this successfully using chkval
i put Cisco-AVPair as a generic check item in the LDAP and is working fine.
the problem is that this is the coming request attributes
Cisco-AVPair = "client-mac-address=000000000000"
Cisco-AVPair = "circuit-id-tag= 1/1/06/09:0.35"
So, the radius always apply the comparison with the first Cisco-AVPair
which is Cisco-AVPair = "client-mac-address=000000000000"
if it is correct returns OK and if not returns reject regardless the
second one
Actually i don't to do a comparison against the first one, my target is
the second but the router sends both in that order .
How can i match both attributes even if they have the same name ??
</pre>
</blockquote>
<pre wrap=""><!---->
If you're doing checkval in ldap... you can't.
</pre>
</blockquote>
that is my conf <br>
<br>
compare_check_items = no<br>
<br>
checkval checkCiscoAVPair {<br>
item-name = Cisco-AVPair<br>
check-name = Cisco-AVPair<br>
data-type = string<br>
#notfound-reject = yes<br>
}<br>
<br>
in LDAP<br>
<br>
radiusCheckItem: Cisco-AVPair =~ "client-mac-address="<br>
radiusCheckItem: Cisco-AVPair == "circuit-id-tag=DOKKI-D15I-GZ-EG atm
1/1/06/0<br>
<br>
<br>
<br>
is there any way to do it ? does last version 2.1.6 checks all the
attributes ?<br>
<br>
<br>
<br>
<blockquote cite="mid:4AB1F3DF.3060605@deployingradius.com" type="cite">
<pre wrap="">
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
</body>
</html>