<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=big5">
<META content="MSHTML 6.00.5730.13" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space"
bgColor=#ffffff>
<DIV>Hi Arran</DIV>
<DIV>I do not define my private attribute while I follow the WISPr such as
"Bandwidth-Max-Up" and "Bandwidth-Max-Down".</DIV>
<DIV>It is no problem that I use UAM method(user login with login page by user
name/password) and freeradius can reply correct attribute.</DIV>
<DIV>But when I use PEAP authentication,after user login it can not reply
correct attribute that I configure in the radgroupreply table.</DIV>
<DIV>Can anyone give some idea?</DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV>BR//Gary</DIV>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt 新細明體">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt 新細明體; font-color: black"><B>From:</B>
<A title=a.cudbardb@freeradius.org
href="mailto:a.cudbardb@freeradius.org">Arran Cudbard-Bell</A> </DIV>
<DIV style="FONT: 10pt 新細明體"><B>To:</B> <A
title=freeradius-users@lists.freeradius.org
href="mailto:freeradius-users@lists.freeradius.org">FreeRadius users mailing
list</A> </DIV>
<DIV style="FONT: 10pt 新細明體"><B>Sent:</B> Wednesday, August 31, 2011 2:21
PM</DIV>
<DIV style="FONT: 10pt 新細明體"><B>Subject:</B> Re: EAP-TLS/PEAP authentication
problem(can not reply correctattribute)</DIV>
<DIV><BR></DIV><BR>
<DIV>
<DIV>On 31 Aug 2011, at 08:11, Arran Cudbard-Bell wrote:</DIV><BR
class=Apple-interchange-newline>
<BLOCKQUOTE type="cite"><BASE href=x-msg://5404/>
<DIV
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space"><BR>
<DIV>
<DIV>On 31 Aug 2011, at 04:37, gary wrote:</DIV><BR
class=Apple-interchange-newline>
<BLOCKQUOTE type="cite"><SPAN class=Apple-style-span
style="WORD-SPACING: 0px; FONT: medium Helvetica; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; WHITE-SPACE: normal; LETTER-SPACING: normal; BORDER-COLLAPSE: separate; orphans: 2; widows: 2; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px">
<DIV bgcolor="#ffffff">
<DIV>Hi All</DIV>
<DIV>I have NAS client which support WISPr standard working with
freeradius 2.1.10+MySQL 5.5 install on Fedora OS.</DIV>
<DIV>I create my test certificate and configure EAP-TLS/PEAP
authentication well in my setup.</DIV>
<DIV>I am using WINDOWS XP as client pc it can pass
authentication but freeradius can not reply correct attribute I
configured such as bandwidth control.</DIV>
<DIV>I noticed in the reply attribute the vendor is Microsoft not
WISPr.</DIV>
<DIV>I wonder if this is WINDOWS default setting how can I modify so
that FR can reply the correct attribute I
configured?</DIV></DIV></SPAN></BLOCKQUOTE>
<DIV><BR></DIV>
<DIV>Look in the dictionary file for your NAS vendor and figure out what the
actual attribute name is for the reply attribute you're trying to
send.</DIV>
<DIV><BR></DIV>
<DIV>The name of a VSA is just there to make it easier to extract and
manipulate attributes, it has no effect on the contents of the packet. So if
you insert a VSA and it comes up as a Microsoft Vendor and this is not what
you intended, then there's a naming conflict and the other Vendors VSAs will
have been renamed.</DIV>
<DIV><BR></DIV></DIV></DIV></BLOCKQUOTE><BR></DIV>
<DIV>Of course if you're adding attributes in the inner tunnel you'll have to
make sure tunnelled reply is set to yes in eap.conf for the relevant EAP
methods.</DIV><BR>
<DIV><SPAN class=Apple-style-span
style="WORD-SPACING: 0px; FONT: medium Helvetica; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); TEXT-INDENT: 0px; WHITE-SPACE: normal; LETTER-SPACING: normal; BORDER-COLLAPSE: separate; orphans: 2; widows: 2; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px"><SPAN
class=Apple-style-span
style="WORD-SPACING: 0px; FONT: medium Helvetica; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); TEXT-INDENT: 0px; WHITE-SPACE: normal; LETTER-SPACING: normal; BORDER-COLLAPSE: separate; orphans: 2; widows: 2; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px">
<DIV
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">
<DIV>Arran Cudbard-Bell</DIV>
<DIV><A
href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</A></DIV>
<DIV><BR></DIV>
<DIV>RADIUS - Half the complexity of
Diameter</DIV></DIV></SPAN></SPAN></DIV><BR>
<P>
<HR>
<P></P>-<BR>List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html</BLOCKQUOTE></BODY></HTML>