On 02-02-16 15:23, James Chen wrote:
# Executing section authorize from file /etc/raddb/sites-enabled/default +group authorize { ++? if ("%{request:Aruba-Essid-Name}" == "microshield-test" ) expand: %{request:Aruba-Essid-Name} -> ? Evaluating ("%{request:Aruba-Essid-Name}" == "microshield-test" ) -> FALSE ++? if ("%{request:Aruba-Essid-Name}" == "microshield-test" ) -> FALSE ++else else {
That means the attribute request:Aruba-Essid-Name is not available or has a different value. Earlier in the debug logging a complete dump of the request packet is shown, you can use that to see how the ssid is transmitted. There are a couple of ways an ssid can added to a radius packet. Aruba-Essid-Name is just one of them, other values that I'm aware of are Colubris-AVPair and Cisco-AVPair with a value ssid=(.*), or appended to Called-Station-Id. What is used really depends on the NAS and the configuration of the NAS. -- Herwin Weststrate