On Mar 5, 2019, at 2:50 AM, dg <dg@poczta.tarman.pl> wrote:
I have problem with identity. I am testing it with windows 7 and my cisco switch - ethernet.
when i log in (and using identity ) i have in logs: Mon Mar 4 18:23:07 2019 : Auth: (36) Login OK: [tom/<via Auth-Type = eap>] (from client SW1 port 0 via TLS tunnel) Mon Mar 4 18:23:07 2019 : Auth: (37) Login OK: [whatever/<via Auth-Type = eap>] (from client SW1 port 50002 cli A1-A2-04-E7-5C-8D)
i know that radius logs what its get from NAS but in this case i have problem with accounting (its log "whatever" instead of "tom")
Yes...
i know that to log the inner User-Name, it needs to be copied from the inner-tunnel to the outer.
in /etc/raddb/sites-enabled/inner-tunnel in post-auth i have update outer.session-state { &User-Name := &User-Name }
The default configuration in v3 has some sample configuration for this topic. See sites-available/default, then look in the "post-auth" section. See also the "post-auth" section of the "inner-tunnel" virtual server. You should see something like: # # If you want the Access-Accept to contain the inner # User-Name, uncomment the following lines. # # update outer.session-state { # User-Name := &User-Name # }
i also tried (from FreeRADIUS Begginers's Guide):
That's 10 years old. I'd ignore it for anything other than general ideas.
but in logs when i trying to log in i still have:
Mon Mar 4 18:23:07 2019 : Auth: (36) Login OK: [tom/<via Auth-Type = eap>] (from client SW1 port 0 via TLS tunnel) Mon Mar 4 18:23:07 2019 : Auth: (37) Login OK: [whatever/<via Auth-Type = eap>] (from client SW1 port 50002 cli A1-A2-04-E7-5C-8D)
There *is* debug output you can look at to see exactly what the server is doing... Alan DeKok.