On Wed, May 1, 2013 at 1:22 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:

Hi,

> sorry alan, perhaps I'm mixing up my examples in an attempt to get this
> working...

run your freeradius is full debug mode. LOOK at what is going on

> 1. where (or in which file) do I add the unlang code?

as you have

I have made the changes in the file proxy-inner-tunnel -- i'm not sure if this is where i'm supposed to be adding the change.

> 2. how do i update the reply?

by updating the reply

> I currently have the following code in my proxy-inner-tunnel file :-
> post-proxy {
> eap
> if (proxy-reply:Access-Accept) {
> update proxy-reply { Framed-IP-Address := "%{sql:SELECT Value FROM
> `radreply` WHERE UserName ='%{User-Name}' AND Attribute =
> 'Framed-IP-Address'}" }

thats not updating the reply is it. thats updating the proxy-reply.

I changed the proxy-inner-tunnel file with the following :-

post-proxy {

# This is necessary for LEAP, or if you set:

# proxy_tunneled_request_as_eap = no

eap

if (proxy-reply:Acct-Interim-Interval = 900) {

update reply {

Framed-IP-Address := "%{sql:SELECT Value FROM `radreply`

WHERE UserName ='%{User-Name}' AND Attribute = 'Framed-IP-Address'}"

}

I am not sure what I should be using for the IF statement as the reply coming back from the upstream proxy looks like this :-

rad_recv: Access-Accept packet from host 168.172.64.224 port 1812, id=61, length=125

Proxy-State = 0x313634

Acct-Interim-Interval = 900

Class = 0xc24109ed0000013700010200a8ac40e040e0000000000000a8ac40e001ce46617c0576420000000000002fcb

MS-Link-Utilization-Threshold = 50

MS-Link-Drop-Time-Limit = 120

MS-MPPE-Encryption-Policy = 0x00000002

MS-MPPE-Encryption-Types = 0x0000000e

There is no IP Address in the reply, and I need to insert it at this stage before sending it back to the 3g carrier radius server.

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html