On 27 Sep 2015, at 11:16, Hernán Freschi <hjf@hjf.com.ar> wrote:
On Sun, Sep 27, 2015 at 11:13 AM, Alan DeKok <aland@deployingradius.com> wrote:
By default the post-auth module writes two records to the radpostauth table: one, from the anonymous identity with the Calling-Station-ID set to the MAC address, and another, for the tunneled identity, with an empty calling ID.
You can fix that by editing the configuration files. That's why they're text.
Right now the rule I'm using is " if (!request:Calling-Station-Id ) " which seems to work for my AP, but is there a better attribute i should be matching on? Some sort of "This-Is-An-Internal-Tunnel-EAP-Request==Yes" ?
Or better yet: how can I dump the attributes in a request when debugging?
"%{debug_attr:request:}" In >= v3.0.x It's not possible in v2. Also if you're using v3 you can use the cache module to store various attributes and share them between the two protocols (assuming you're using FreeRADIUS for DHCP). If this is on a local network without you may want to look at use v3.1.x. v3.1.x now works correctly with broadcast DHCP packets with no additional configuration. The previous versions (2.2.x, v3.0.x) required you to specify the src_ipaddr of the server in the listen section, or specify it at runtime using various attributes. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2