hi In my last reply, I have shown that I edited the default file, and it has been really read by the radiusd. Actually, If I fix the error by : Auth-Type eap { eap { handled = 1 } if (handled && (Response-Packet-Type == Access-Challenge)) { attr_filter.access_challenge.post-auth handled # override the "updated" code from attr_filter (<-- notice this line) } } } And the radiusd will work normally. And I can see debug output like the following: Thu May 27 00:09:59 2010 : Debug: server { Thu May 27 00:09:59 2010 : Debug: modules { Thu May 27 00:09:59 2010 : Debug: Module: Checking authenticate {...} for more modules to load Thu May 27 00:09:59 2010 : Debug: Module: Instantiating attr_filter.access_challenge Thu May 27 00:09:59 2010 : Debug: ****** attr_filter_instantiate Thu May 27 00:09:59 2010 : Debug: attr_filter attr_filter.access_challenge { Thu May 27 00:09:59 2010 : Debug: attrsfile = "/usr/local/etc/raddb/attrs.access_challenge" Thu May 27 00:09:59 2010 : Debug: key = "%{User-Name}" Thu May 27 00:09:59 2010 : Debug: } Thu May 27 00:09:59 2010 : Debug: ****** getattrsfile Thu May 27 00:09:59 2010 : Debug: Module: Instantiating handled Thu May 27 00:09:59 2010 : Debug: always handled { Thu May 27 00:09:59 2010 : Debug: rcode = "handled" Thu May 27 00:09:59 2010 : Debug: simulcount = 0 Thu May 27 00:09:59 2010 : Debug: mpp = no Thu May 27 00:09:59 2010 : Debug: } Thu May 27 00:09:59 2010 : Debug: Module: Checking authorize {...} for more modules to load Thu May 27 00:09:59 2010 : Debug: (Loaded rlm_preprocess, checking if it's valid) Thu May 27 00:09:59 2010 : Debug: Module: Linked to module rlm_preprocess I think it just shows the attr_filter attr_filter.access_challenge is now loaded by server.(I don't know if it is, since I don't know what will be the *right* output.) However, the filter does not work. Can anyone tell me what the problem is? Best Regards 2010-05-27 ----- Original Message ----- From: WWF To: FreeRadius users mailing list Sent: 2010-05-27, 11:35:40 Subject: Re:Re: still about how to return some attributes only inAccess-Accept packet Thanks for your kindly reply. Now I edited the default file in /usr/local/etc/raddb/sites-enabled, notice that "handled # override the "updated" code from attr_filter" (it will cause an error for my Radiusd): # # Allow EAP authentication. eap # # The older configurations sent a number of attributes in # Access-Challenge packets, which wasn't strictly correct. # If you want to filter out these attributes, uncomment # the following lines. # Auth-Type eap { eap { handled = 1 } if (handled && (Response-Packet-Type == Access-Challenge)) { attr_filter.access_challenge.post-auth handled # override the "updated" code from attr_filter } } } The radiusd debug output is as follows: root@ubuntu:/usr/local/var/log/radius# radiusd -Xxxxx Wed May 26 20:30:20 2010 : Info: FreeRADIUS Version 2.1.9, for host i686-pc-linux-gnu, built on May 26 2010 at 02:10:20 Wed May 26 20:30:20 2010 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. Wed May 26 20:30:20 2010 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed May 26 20:30:20 2010 : Info: PARTICULAR PURPOSE. Wed May 26 20:30:20 2010 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed May 26 20:30:20 2010 : Info: GNU General Public License v2. Wed May 26 20:30:20 2010 : Info: Starting - reading configuration files ... Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/radiusd.conf Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/proxy.conf Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/clients.conf Wed May 26 20:30:20 2010 : Debug: including files in directory /usr/local/etc/raddb/modules/ Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/acct_unique Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/detail.example.com Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/logintime Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/etc_group Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/realm Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/ntlm_auth Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/krb5 Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/passwd Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/counter Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/detail.log Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/linelog Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/unix Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/smsotp Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/chap Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/policy Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/radutmp Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/always Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/exec Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/otp Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/detail Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/cui Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/mac2vlan Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/mac2ip Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/ldap Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/ippool Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/attr_rewrite Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/expr Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/preprocess Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/digest Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/checkval Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/wimax Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/pap Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/attr_filter Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/sradutmp Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/inner-eap Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/echo Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/mschap Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/sql_log Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/smbpasswd Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/expiration Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/pam Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/files Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/modules/perl Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/eap.conf Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/policy.conf Wed May 26 20:30:20 2010 : Debug: including files in directory /usr/local/etc/raddb/sites-enabled/ Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/control-socket Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/status Wed May 26 20:30:20 2010 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/default Wed May 26 20:30:20 2010 : Debug: main { Wed May 26 20:30:20 2010 : Debug: allow_core_dumps = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: including dictionary file /usr/local/etc/raddb/dictionary Wed May 26 20:30:20 2010 : Debug: main { Wed May 26 20:30:20 2010 : Debug: prefix = "/usr/local" Wed May 26 20:30:20 2010 : Debug: localstatedir = "/usr/local/var" Wed May 26 20:30:20 2010 : Debug: logdir = "/usr/local/var/log/radius" Wed May 26 20:30:20 2010 : Debug: libdir = "/usr/local/lib" Wed May 26 20:30:20 2010 : Debug: radacctdir = "/usr/local/var/log/radius/radacct" Wed May 26 20:30:20 2010 : Debug: hostname_lookups = no Wed May 26 20:30:20 2010 : Debug: max_request_time = 30 Wed May 26 20:30:20 2010 : Debug: cleanup_delay = 5 Wed May 26 20:30:20 2010 : Debug: max_requests = 1024 Wed May 26 20:30:20 2010 : Debug: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" Wed May 26 20:30:20 2010 : Debug: checkrad = "/usr/local/sbin/checkrad" Wed May 26 20:30:20 2010 : Debug: debug_level = 0 Wed May 26 20:30:20 2010 : Debug: proxy_requests = yes Wed May 26 20:30:20 2010 : Debug: log { Wed May 26 20:30:20 2010 : Debug: stripped_names = yes Wed May 26 20:30:20 2010 : Debug: auth = yes Wed May 26 20:30:20 2010 : Debug: auth_badpass = yes Wed May 26 20:30:20 2010 : Debug: auth_goodpass = yes Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: security { Wed May 26 20:30:20 2010 : Debug: max_attributes = 200 Wed May 26 20:30:20 2010 : Debug: reject_delay = 1 Wed May 26 20:30:20 2010 : Debug: status_server = yes Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: radiusd: #### Loading Realms and Home Servers #### Wed May 26 20:30:20 2010 : Debug: proxy server { Wed May 26 20:30:20 2010 : Debug: retry_delay = 5 Wed May 26 20:30:20 2010 : Debug: retry_count = 3 Wed May 26 20:30:20 2010 : Debug: default_fallback = no Wed May 26 20:30:20 2010 : Debug: dead_time = 120 Wed May 26 20:30:20 2010 : Debug: wake_all_if_all_dead = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: home_server localhost { Wed May 26 20:30:20 2010 : Debug: ipaddr = 127.0.0.1 Wed May 26 20:30:20 2010 : Debug: port = 1812 Wed May 26 20:30:20 2010 : Debug: type = "auth" Wed May 26 20:30:20 2010 : Debug: secret = "testing123" Wed May 26 20:30:20 2010 : Debug: response_window = 20 Wed May 26 20:30:20 2010 : Debug: max_outstanding = 65536 Wed May 26 20:30:20 2010 : Debug: require_message_authenticator = no Wed May 26 20:30:20 2010 : Debug: zombie_period = 40 Wed May 26 20:30:20 2010 : Debug: status_check = "status-server" Wed May 26 20:30:20 2010 : Debug: ping_interval = 30 Wed May 26 20:30:20 2010 : Debug: check_interval = 30 Wed May 26 20:30:20 2010 : Debug: num_answers_to_alive = 3 Wed May 26 20:30:20 2010 : Debug: num_pings_to_alive = 3 Wed May 26 20:30:20 2010 : Debug: revive_interval = 120 Wed May 26 20:30:20 2010 : Debug: status_check_timeout = 4 Wed May 26 20:30:20 2010 : Debug: irt = 2 Wed May 26 20:30:20 2010 : Debug: mrt = 16 Wed May 26 20:30:20 2010 : Debug: mrc = 5 Wed May 26 20:30:20 2010 : Debug: mrd = 30 Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: home_server_pool my_auth_failover { Wed May 26 20:30:20 2010 : Debug: type = fail-over Wed May 26 20:30:20 2010 : Debug: home_server = localhost Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: realm example.com { Wed May 26 20:30:20 2010 : Debug: auth_pool = my_auth_failover Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: realm LOCAL { Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: radiusd: #### Loading Clients #### Wed May 26 20:30:20 2010 : Debug: client localhost { Wed May 26 20:30:20 2010 : Debug: ipaddr = 127.0.0.1 Wed May 26 20:30:20 2010 : Debug: require_message_authenticator = no Wed May 26 20:30:20 2010 : Debug: secret = "testing123" Wed May 26 20:30:20 2010 : Debug: nastype = "other" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: radiusd: #### Instantiating modules #### Wed May 26 20:30:20 2010 : Debug: instantiate { Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_exec, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_exec Wed May 26 20:30:20 2010 : Debug: Module: Instantiating exec Wed May 26 20:30:20 2010 : Debug: exec { Wed May 26 20:30:20 2010 : Debug: wait = no Wed May 26 20:30:20 2010 : Debug: input_pairs = "request" Wed May 26 20:30:20 2010 : Debug: shell_escape = yes Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_expr, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_expr Wed May 26 20:30:20 2010 : Debug: Module: Instantiating expr Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_expiration, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_expiration Wed May 26 20:30:20 2010 : Debug: Module: Instantiating expiration Wed May 26 20:30:20 2010 : Debug: expiration { Wed May 26 20:30:20 2010 : Debug: reply-message = "Password Has Expired " Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_logintime, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_logintime Wed May 26 20:30:20 2010 : Debug: Module: Instantiating logintime Wed May 26 20:30:20 2010 : Debug: logintime { Wed May 26 20:30:20 2010 : Debug: reply-message = "You are calling outside your allowed timespan " Wed May 26 20:30:20 2010 : Debug: minimum-timeout = 60 Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: radiusd: #### Loading Virtual Servers #### Wed May 26 20:30:20 2010 : Debug: server inner-tunnel { Wed May 26 20:30:20 2010 : Debug: modules { Wed May 26 20:30:20 2010 : Debug: Module: Checking authenticate {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_pap, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_pap Wed May 26 20:30:20 2010 : Debug: Module: Instantiating pap Wed May 26 20:30:20 2010 : Debug: pap { Wed May 26 20:30:20 2010 : Debug: encryption_scheme = "auto" Wed May 26 20:30:20 2010 : Debug: auto_header = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_chap, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_chap Wed May 26 20:30:20 2010 : Debug: Module: Instantiating chap Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_mschap, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_mschap Wed May 26 20:30:20 2010 : Debug: Module: Instantiating mschap Wed May 26 20:30:20 2010 : Debug: mschap { Wed May 26 20:30:20 2010 : Debug: use_mppe = yes Wed May 26 20:30:20 2010 : Debug: require_encryption = no Wed May 26 20:30:20 2010 : Debug: require_strong = no Wed May 26 20:30:20 2010 : Debug: with_ntdomain_hack = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_unix, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_unix Wed May 26 20:30:20 2010 : Debug: Module: Instantiating unix Wed May 26 20:30:20 2010 : Debug: unix { Wed May 26 20:30:20 2010 : Debug: radwtmp = "/usr/local/var/log/radius/radwtmp" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_eap, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_eap Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap Wed May 26 20:30:20 2010 : Debug: eap { Wed May 26 20:30:20 2010 : Debug: default_eap_type = "md5" Wed May 26 20:30:20 2010 : Debug: timer_expire = 60 Wed May 26 20:30:20 2010 : Debug: ignore_unknown_eap_types = no Wed May 26 20:30:20 2010 : Debug: cisco_accounting_username_bug = no Wed May 26 20:30:20 2010 : Debug: max_sessions = 4096 Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_md5 Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-md5 Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_leap Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-leap Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_gtc Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-gtc Wed May 26 20:30:20 2010 : Debug: gtc { Wed May 26 20:30:20 2010 : Debug: challenge = "Password: " Wed May 26 20:30:20 2010 : Debug: auth_type = "PAP" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_tls Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-tls Wed May 26 20:30:20 2010 : Debug: tls { Wed May 26 20:30:20 2010 : Debug: rsa_key_exchange = no Wed May 26 20:30:20 2010 : Debug: dh_key_exchange = yes Wed May 26 20:30:20 2010 : Debug: rsa_key_length = 512 Wed May 26 20:30:20 2010 : Debug: dh_key_length = 512 Wed May 26 20:30:20 2010 : Debug: verify_depth = 0 Wed May 26 20:30:20 2010 : Debug: pem_file_type = yes Wed May 26 20:30:20 2010 : Debug: private_key_file = "/usr/local/etc/raddb/certs/server.pem" Wed May 26 20:30:20 2010 : Debug: certificate_file = "/usr/local/etc/raddb/certs/server.pem" Wed May 26 20:30:20 2010 : Debug: CA_file = "/usr/local/etc/raddb/certs/ca.pem" Wed May 26 20:30:20 2010 : Debug: private_key_password = "whatever" Wed May 26 20:30:20 2010 : Debug: dh_file = "/usr/local/etc/raddb/certs/dh" Wed May 26 20:30:20 2010 : Debug: random_file = "/usr/local/etc/raddb/certs/random" Wed May 26 20:30:20 2010 : Debug: fragment_size = 1024 Wed May 26 20:30:20 2010 : Debug: include_length = yes Wed May 26 20:30:20 2010 : Debug: check_crl = no Wed May 26 20:30:20 2010 : Debug: cipher_list = "DEFAULT" Wed May 26 20:30:20 2010 : Debug: make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" Wed May 26 20:30:20 2010 : Debug: cache { Wed May 26 20:30:20 2010 : Debug: enable = no Wed May 26 20:30:20 2010 : Debug: lifetime = 24 Wed May 26 20:30:20 2010 : Debug: max_entries = 255 Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_ttls Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-ttls Wed May 26 20:30:20 2010 : Debug: ttls { Wed May 26 20:30:20 2010 : Debug: default_eap_type = "md5" Wed May 26 20:30:20 2010 : Debug: copy_request_to_tunnel = no Wed May 26 20:30:20 2010 : Debug: use_tunneled_reply = no Wed May 26 20:30:20 2010 : Debug: virtual_server = "inner-tunnel" Wed May 26 20:30:20 2010 : Debug: include_length = yes Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_peap Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-peap Wed May 26 20:30:20 2010 : Debug: peap { Wed May 26 20:30:20 2010 : Debug: default_eap_type = "mschapv2" Wed May 26 20:30:20 2010 : Debug: copy_request_to_tunnel = no Wed May 26 20:30:20 2010 : Debug: use_tunneled_reply = no Wed May 26 20:30:20 2010 : Debug: proxy_tunneled_request_as_eap = yes Wed May 26 20:30:20 2010 : Debug: virtual_server = "inner-tunnel" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Wed May 26 20:30:20 2010 : Debug: Module: Instantiating eap-mschapv2 Wed May 26 20:30:20 2010 : Debug: mschapv2 { Wed May 26 20:30:20 2010 : Debug: with_ntdomain_hack = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Checking authorize {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_realm, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_realm Wed May 26 20:30:20 2010 : Debug: Module: Instantiating suffix Wed May 26 20:30:20 2010 : Debug: realm suffix { Wed May 26 20:30:20 2010 : Debug: format = "suffix" Wed May 26 20:30:20 2010 : Debug: delimiter = "@" Wed May 26 20:30:20 2010 : Debug: ignore_default = no Wed May 26 20:30:20 2010 : Debug: ignore_null = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_files, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_files Wed May 26 20:30:20 2010 : Debug: Module: Instantiating files Wed May 26 20:30:20 2010 : Debug: files { Wed May 26 20:30:20 2010 : Debug: usersfile = "/usr/local/etc/raddb/users" Wed May 26 20:30:20 2010 : Debug: acctusersfile = "/usr/local/etc/raddb/acct_users" Wed May 26 20:30:20 2010 : Debug: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" Wed May 26 20:30:20 2010 : Debug: compat = "no" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Checking session {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_radutmp, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_radutmp Wed May 26 20:30:20 2010 : Debug: Module: Instantiating radutmp Wed May 26 20:30:20 2010 : Debug: radutmp { Wed May 26 20:30:20 2010 : Debug: filename = "/usr/local/var/log/radius/radutmp" Wed May 26 20:30:20 2010 : Debug: username = "%{User-Name}" Wed May 26 20:30:20 2010 : Debug: case_sensitive = yes Wed May 26 20:30:20 2010 : Debug: check_with_nas = yes Wed May 26 20:30:20 2010 : Debug: perm = 384 Wed May 26 20:30:20 2010 : Debug: callerid = yes Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: Module: Checking post-proxy {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: Module: Checking post-auth {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_attr_filter Wed May 26 20:30:20 2010 : Debug: Module: Instantiating attr_filter.access_reject Wed May 26 20:30:20 2010 : Debug: ****** attr_filter_instantiate Wed May 26 20:30:20 2010 : Debug: attr_filter attr_filter.access_reject { Wed May 26 20:30:20 2010 : Debug: attrsfile = "/usr/local/etc/raddb/attrs.access_reject" Wed May 26 20:30:20 2010 : Debug: key = "%{User-Name}" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: ****** getattrsfile Wed May 26 20:30:20 2010 : Debug: } # modules Wed May 26 20:30:20 2010 : Debug: } # server Wed May 26 20:30:20 2010 : Debug: server status { Wed May 26 20:30:20 2010 : Debug: modules { Wed May 26 20:30:20 2010 : Debug: Module: Checking authorize {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: (Loaded rlm_always, checking if it's valid) Wed May 26 20:30:20 2010 : Debug: Module: Linked to module rlm_always Wed May 26 20:30:20 2010 : Debug: Module: Instantiating ok Wed May 26 20:30:20 2010 : Debug: always ok { Wed May 26 20:30:20 2010 : Debug: rcode = "ok" Wed May 26 20:30:20 2010 : Debug: simulcount = 0 Wed May 26 20:30:20 2010 : Debug: mpp = no Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: } # modules Wed May 26 20:30:20 2010 : Debug: } # server Wed May 26 20:30:20 2010 : Debug: server { Wed May 26 20:30:20 2010 : Debug: modules { Wed May 26 20:30:20 2010 : Debug: Module: Checking authenticate {...} for more modules to load Wed May 26 20:30:20 2010 : Debug: Module: Instantiating attr_filter.access_challenge Wed May 26 20:30:20 2010 : Debug: ****** attr_filter_instantiate Wed May 26 20:30:20 2010 : Debug: attr_filter attr_filter.access_challenge { Wed May 26 20:30:20 2010 : Debug: attrsfile = "/usr/local/etc/raddb/attrs.access_challenge" Wed May 26 20:30:20 2010 : Debug: key = "%{User-Name}" Wed May 26 20:30:20 2010 : Debug: } Wed May 26 20:30:20 2010 : Debug: ****** getattrsfile Wed May 26 20:30:20 2010 : Error: /usr/local/etc/raddb/sites-enabled/default[301]: Unknown action 'override'. Wed May 26 20:30:20 2010 : Error: /usr/local/etc/raddb/sites-enabled/default[299]: Failed to parse "if" subsection. root@ubuntu:/usr/local/var/log/radius# Therefore, I don't understand why this default file is not the one my server is reading. 在2010-05-26 23:10:42，"Alan DeKok" <aland@deployingradius.com> 写道：
WWF wrote:
You were told what the problem was, and how to fix it. There is no magic involved.
Sorry, I don't know which one? If it is the
You said you edited a file. The debug output showed that the file was not edited.
Maybe I think this is a good and only way to get some hints after my msg in http://lists.freeradius.org/pipermail/freeradius-users/2010-May/msg00596.htm.... It seems a long wait. I am not trying to complain but really want to use the software correctly.
Make sure you are editing the file that the server is reading. There really aren't many ways of saying that. It is *impossible* to help you until you edit the file that the server is reading.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
网易为中小企业免费提供企业邮箱（自主域名）