Nathan McDavit-Van Fleet wrote:
I'm afraid I still can't get this to work at all.
Is the server sending the correct attributes to the NAS? If yes, blame the NAS. Otherwise, fix your configuration.
I decided to pare down my test to its simplest form. Basically I created a test user with the AVPair configuration as below. Which is basically what Cisco describes in its documentation (but with ACS).
# test user test_login Cleartext-Password := "test_pass" Cisco-AVPair += "url-redirect=http://www.cisco.com/index.html", Service-Type = Outbound-User
So essentially this user should indeed trigger the controller with that AVPair configuration. Later I plan on dynamically triggering it when someone authenticated using TTLs. (I've also tried "=" instead of "+=" for the AVPair).
Do simple tests to see if it works. If you have ACS, use wireshark to see what ACS sends in response, and make FreeRADIUS send the same thing. Alan DeKok.