On 25 Jun 2015, at 23:21, Jake He <jake.he@gmail.com> wrote:
Hi,
I have a problem where Attribute MT-Recv-Limit is returned in Access-Challenge but not in Access-Accept.
This is my setup. FR 3.0.8
I have configured following in the eap.conf file in the ttls section :
copy_request_to_tunnel = yes use_tunneled_reply = yes virtual_server = "inner-tunnel"
/etc/freeradius/sites-available/inner-tunnel. post-auth block, uncommented.
update { &outer.session-state: += &reply: }
update outer.session-state {
MS-MPPE-Encryption-Policy !* ANY
MS-MPPE-Encryption-Types !* ANY
MS-MPPE-Send-Key !* ANY
MS-MPPE-Recv-Key !* ANY
Message-Authenticator !* ANY
EAP-Message !* ANY
Proxy-State !* ANY
}
I have a fixed radreply attribute Session-Timeout in the database. This is sent in the Access-Accept.
MT-Recv-Limit is sent by a perl script <https://raw.githubusercontent.com/zhex900/radius-config/master/version.3/mods-config/perl/check_usage.pl>. This script add a new radreply $RAD_REPLY{'Mikrotik-Recv-Limit'}. This is called in the site-available/default authorize block. Mikrotik-Recv-Limit does appear in the Access-Challenge but not in the Access-Accept.
Any ideas?
Not really, seeing as you've not provided the debug output... -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2