Alan DeKok wrote:
Arran Cudbard-Bell wrote:
So the eap module extracts the attributes encoded in the eap message ? I can see that working for EAP GTC and EAP PAP but not MschapV2 ?
It works for GTC, PAP, and MS-CHAPv2. The server can terminate PEAP, and proxy the inner EAP-MSCHAPv2 session as plain MS-CHAPv2.
With the new virtual server support, it's now possible to have the inner tunnel session run through it's own virtual server, independent of the outer tunnel session. Just set "Virtual-Server = foo" via "update control", and the inner tunnel session will be run through "server foo".
30 lines of code changed: incredible new flexibility.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes :) I was just looking at the protocol filters, they look interesting and will make a lot of people on the list happy ... Just finished building on my 32bit machine and .. ++? if ("%{NAS-IP-Address}" == "127.0.0.1") -> TRUE ++- entering if ("%{NAS-IP-Address}" == "127.0.0.1") expand: %{Packet-Src-IP-Address} -> 139.184.14.161 Segmentation fault *sigh* bt radius_update_attrlist (request=0x80280840, cs=0x8004c798, input_vps=0x8016bc60, name=0x8004c7f0 "request") at evaluate.c:854 854 if ((from_list[i]->operator == T_OP_EQ) || (gdb) bt #0 radius_update_attrlist (request=0x80280840, cs=0x8004c798, input_vps=0x8016bc60, name=0x8004c7f0 "request") at evaluate.c:854 #1 0x80014afa in modcall (component=1, c=0x8016bdb0, request=0x80280840) at modcall.c:396 #2 0x8001141a in indexed_modcall (space=<value optimized out>, comp=1, idx=0, request=0x80280840) at modules.c:413 #3 0x80006c30 in rad_authenticate (request=0x80280840) at auth.c:540 #4 0x8001f096 in radius_handle_request (request=0x80280840, fun=0x80006b10 <rad_authenticate>) at event.c:2174 #5 0x80019fe6 in thread_pool_addrequest (request=0x80280840, fun=0x80006b10 <rad_authenticate>) at threads.c:836 #6 0x80015c5f in main (argc=2, argv=0xbfb42524) at radiusd.c:716 Same as on the apples !!! Are you compiling with GCC ? If you are compiling on GCC with the default configuration options ... then it can only be my config ... it's the only constant... and a bug in a source *somewhere*, just in a very obscure place. :\ Would you like the core dumps from the 32bit machine ? --- Arran