If I put in default authorize section, the called-station-id is present.<div><br></div><div>What I just don't understand is why it doesn't work in dynamic hosts and also why default is loaded at all?</div><div><br></div><div>The called-station-id is certainly present in the request:</div><div><br></div><div><div>rad_recv: Access-Request packet from host 94.x.x.x port 29429, id=3, length=141</div><div>server dynamic_client_server {</div><div>} # server dynamic_client_server</div><div>- Added client 94.x.x.x with shared secret testing123</div><div>rad_recv: Access-Request packet from host 94.x.x.x port 29429, id=3, length=141</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Name = "full"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>User-Password = "Y\270\306\323"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Identifier = "simulator"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Port-Type = Wireless-802.11</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Service-Type = Login-User</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-IP-Address = 192.168.0.1</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Called-Station-Id = "00-00-00-11-00-10"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Calling-Station-Id = "11-11-11-22-11-21"</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>Acct-Session-Id = "JRadius-851365653dd8b055354910131660a6ad"</div><div># Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default</div></div><div><br></div><div>---</div><div><br></div><div><br></div><div><br></div><div><br><div><div>On 24 Oct 2011, at 10:03, Fajar A. Nugraha-2 [via FreeRadius] wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
On Mon, Oct 24, 2011 at 3:47 PM, JennyBlunt <<a href="x-msg://1875/user/SendEmail.jtp?type=node&node=4931798&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>> wrote:
<div class="shrinkable-quote"><div class='shrinkable-quote'><br>> Hi,
<br>> Huntgroup-Name := "%{sql:SELECT `groupname` FROM `radhuntgroup` WHERE
<br>> nasipaddress='%{NAS-IP-Address}'}"
<br>>
<br>> The mysql query then looks like this:
<br>>
<br>> SELECT `groupname` FROM `radhuntgroup` WHERE nasipaddress=''
<br>>
<br>> If I use packet-src-ip-address, the query is fine.
<br>>
<br>> Replacing with called-station-id renders nothing as well.
<br>>
<br>> Does this have something to do with the dynamic clients??
</div></div>It shouldn't.
<br><br>What does the debug log show? What attributes were sent by the NAS in
<br>access-request packet?
<br><br><a href="http://freeradius.org/rfc/rfc2865.html#NAS-IP-Address" target="_top" rel="nofollow" link="external">http://freeradius.org/rfc/rfc2865.html#NAS-IP-Address</a> says "Either
<br>NAS-IP-Address or NAS-Identifier MUST be present in an Access-Request
<br>packet."
<br><br>so if your NAS sends neither, it's broken.
<br><br>--
<br>Fajar
<br>-
<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_top" rel="nofollow" link="external">http://www.freeradius.org/list/users.html</a><br>
<br>
<br>
<hr noshade="noshade" size="1" color="#cccccc">
<div style="color:#444; font: 12px tahoma,geneva,helvetica,arial,sans-serif;">
<div style="font-weight:bold">If you reply to this email, your message will be added to the discussion below:</div>
<a href="http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tp4883866p4931798.html" target="_top" rel="nofollow" link="external">http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tp4883866p4931798.html</a>
</div>
<div style="color:#666; font: 11px tahoma,geneva,helvetica,arial,sans-serif;margin-top:.4em">
To unsubscribe from Authorising Clients by Calling Station ID Not IP, <a href="" target="_top" rel="nofollow" link="external">click here</a>.
</div></blockquote></div><br></div>
<br/><hr align="left" width="300" />
View this message in context: <a href="http://freeradius.1045715.n5.nabble.com/Authorising-Clients-by-Calling-Station-ID-Not-IP-tp4883866p4933540.html">Re: Authorising Clients by Calling Station ID Not IP</a><br/>
Sent from the <a href="http://freeradius.1045715.n5.nabble.com/FreeRadius-User-f2740693.html">FreeRadius - User mailing list archive</a> at Nabble.com.<br/>