On Sep 21, 2017, at 3:31 PM, Selahattin Cilek <selahattin_cilek@hotmail.com> wrote:
I use FreeRADIUS 3.0.15 and for some strange reason, the Unifi APs refuse to append the Class attribute for those users that use anonymous identity.
Here are 4 accounting packets that were generated by the same UAP for the same user. When she does not use anonymous identity, we see the Class attribute. But when she *does* use anonymous identity, the Class attribute goes missing:
That's not good.
I think the UAP is trying to protect the user's privacy and I hate that.
It's not supposed to be smart. It's supposed to do what the RADIUS server tells it to do.
I will definitely get in touch with Ubnt and ask them to change this behaviour.
That's the best approach.
But is there anything I can do on the FreeRADIUS server to make sure that the Class attribute is present in all accounting packets?
No. The AP creates the accounting packets. No amount of poking FreeRADIUS will fix a broken AP. Alan DeKok.