Hi Alan,

Thank you for your reply.  Please see my comments inline as well.

And thank you for your continued patience!


On 07/07/2014 09:10 AM, Alan DeKok wrote:
Tony DeMatteis wrote:

I am setting up/migrating to a new Radius server.  My current server is
using flat files (users/clients).  Not a huge deployment, but now have
designs to scale larger.  I've run into a problem with one reply
attribute I can't seem to identify the problem.  I've searched the
documentation (and Googled), and while probably in from of my eyes, I
can't seem to find the cause/solution.  The same reply attributes work
fine in my current/production server, but fail (and only when trying to
include the "DragonWave-Privilege-Level" reply attribute).

  The dragonwave dictionary isn't on the new server.  Add it to the new
server, and it will work.
As you pointed out, the dragonwave dictionary is not included as one of the dictionaries in a default installation.  So I added the needed dictionary to the /usr/share/freeradius directory (new server).
 

      

        
 Now one
note, in my production server in my user stanza I use the "=" operator
for each of the reply attributes.  However, in my new server, when using
the "=" as the operator in the reply attribute I was receiving only one
attribute upon authentication.  I then thought I understood from the
documentation that I needed to use "+=" in my reply attributes.


      

      
  Yes, += is what you want to use.



      

        
 After
making that change, all the group attributes were returned.  One
difference may be that I am specifying the "group" attributes under each
"user" (current/production) vs in a "group" which is referenced (new
server)?


      

      
  I don't know what that means.

  The functionality of the "users" file is documented.  See "man users",
and the comments at the start of the default file.

    

    Forgive my ignorance, I will review the man
      users file.  What I meant was that, as I learn more, I don't
      believe by adding specific attributes to a single user in the user
      file (old server) that I was effecting a groupreply.  On the new
      server I am specifically defining the reply attributes I want
      returned and adding a profile (group) to the user.  So I noted
      that, not expecting there to be any difference in the operator of
      the reply attr but, not being absolutely sure.

    

      



      

        
# /usr/share/freeradius/dictionary.dragonwave

      

    

    This is the path of the dictionary on the New
      Server

    

      

        

      

      
  Which is on the old server, and isn't on the new one.

  I've added it to the default release, so it will be there.  At least
for vendors who ship recent versions of the server instead of 2.1.12.

    

    Thank you very much =)

    

      

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html