Thanks for answering Ivan. Actually the radius debug prints my output script in one single line, but I have 3 distincts echo in my scripts. " ... echo Tunnel-Medium-Type = 6, echo Tunnel-Type =13, echo Tunnel-Private-Group-Id = 1 exit 0" So the matter might be away... I am certainly missing something... Do I need to do something more than make my script printing out the attributes to add them in the reply ? 2009/5/22 Ivan Kalik <tnt@kalik.net>:
Hi all,
I have installed freeradius 2.14 on Freebsd using the ports. I need to use an external script, so in radiusd.conf I created in the module section : exec GETVLAN { wait = yes program = "/usr/local/etc/raddb/getVlan %{User-Name}" input-pairs = request output-pairs = reply }
and I use it in the post-auth section of the inner-tunnel. (I 'm using peap/mschapv2)
But the result is not what I expected... I do "echo" for assigning vlan id but the attributes are not appended to the reply. Here is a cut of the debug debug :
... [GETVLAN] expand: %{User-Name} -> nobody Exec-Program output: Tunnel-Medium-Type = 6, Tunnel-Type = 13, Tunnel-Private-Group-Id = 1 Exec-Program-Wait: value-pairs: Tunnel-Medium-Type = 6, Tunnel-Type = 13, Tunnel-Private-Group-Id = 1 Exec-Program: returned: 3 ++[GETVLAN] returns ok
Your script prints:
value-pairs: Tunnel-Medium-Type = 6, Tunnel-Type = 13, Tunnel-Private-Group-Id = 1
It should print:
Tunnel-Medium-Type = 6, Tunnel-Type = 13, Tunnel-Private-Group-Id = 1
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html