<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hello,<div><br></div><div>I'm useing FreeRADIUS in Version 2.1.10.</div><div><br></div><div>I would configure my Switch-Ports Mac-Based. When a Computer wired a Perl-Script should check the Username and gives VLAN back.</div><div>For a simple Test i don't have some conditions in the Script only outputs:</div><div><br></div><div><br></div><div><div>use strict;</div><div>use warnings;</div><div>use DBI;</div><div><br></div><div>### SwitchUser ###</div><div>my $pass = $ARGV[0];</div><div>print 'Access-Accept';</div><div>print 'Cleartext-Password := "'.$pass.'"';</div><div>exit 0;</div></div><div><br></div><div><br></div><div><br></div><div>my modules/exec looks here:</div><div><br></div><div><div>exec {</div><div> wait = yes</div><div> program = "/usr/bin/perl /usr/local/test.pl %{User-Name}"</div><div> input_pairs = request</div><div> output = reply</div><div> shell_escape = yes</div><div>}</div></div><div><br></div><div><br></div><div>and my sites-enabled/switch its this:</div><div><br></div><div><div>authorize {</div><div> exec</div><div> expiration</div><div> chap</div><div>}</div><div><br></div><div>authenticate {</div><div> chap</div><div>}</div><div>post-auth {</div><div> exec</div><div>}</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div>When i wired with my PC Log Says following:</div><div><br></div><div><div># Executing section authorize from file /etc/freeradius/sites-enabled/switchport</div><div>+- entering group authorize {...}</div><div>[php] <span class="Apple-tab-span" style="white-space: pre; "> </span>expand: %{User-Name} -> aa:bb:cc:dd:ee:ff</div><div>Exec-Program output: Access-AcceptCleartext-Password := "aa:bb:cc:dd:ee:ff"</div><div>Exec-Program-Wait: plaintext: Access-AcceptCleartext-Password := "aa:bb:cc:dd:ee:ff"</div><div>Exec-Program: returned: 0</div><div>++[php] returns ok</div><div>++[expiration] returns noop</div><div>[chap] Setting 'Auth-Type := CHAP'</div><div>++[chap] returns ok</div><div>Found Auth-Type = CHAP</div><div># Executing group from file /etc/freeradius/sites-enabled/switchport</div><div>+- entering group authenticate {...}</div><div>[chap] login attempt by "aa:bb:cc:dd:ee:ff" with CHAP password</div><div>[chap] <b>Cleartext-Password is required for authentication</b></div><div>++[chap] returns invalid</div><div>Failed to authenticate the user.</div><div>} # server switchport</div><div>Delaying reject of request 0 for 1 seconds</div><div>Going to the next request</div><div>Waking up in 0.9 seconds.</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div>Anyone knows what is wrong in my Configuration?</div></body></html>