Peter Hicks <peter.hicks@poggs.co.uk> wrote:
I've set with_cisco_vsa_hack = yes in radiusd.conf on a box running FreeRADIUS 1.0.4, but when running "freeradius -X", I still see accounting packets with un-hacked Cisco-AVPair entries during debug:
rad_recv: Accounting-Request packet from host xxxx:1636, id=198, length=292
That prints what's in the packet as received. It happens *long* before any "with_cisco_vsa_hack" is processed. And saying "I've set with_cisco_vsa_hack = yes in radiusd.conf" confuses the issue. You set it in the configuration for a module in radiusd.conf. So... the logical conclusion would be that it affects only the module, which isn't being executed until after that debug output is printed. Again, reading debug mode should make this clear.
Is this output merely the accounting request packet as it's received, before preprocessing and the cisco_vsa_hack taking place?
Yes. Read the debug output. The packet is printed, and some time later the preprocess module is run.
Can anyone clarify what's happening, please? I'd be pleasantly surprised if I'm wrong and I really can start using the contents of Cisco-AVPairs for accounting.
For accounting... what? You can already log them to the detail file. What else do you want to do? Alan DeKok.