On 28 Apr 2015, at 08:52, Gerald Vogt <vogt@spamcop.net> wrote:
On 28/04/15 09:06, Arran Cudbard-Bell wrote:
ssid { if ( Called-Station-Id ) { if ( Called-Station-Id =~ /^[-A-Fa-f0-9]+:(.*)$/ ) { update { Local-SSID = "%{1}" } } } }
A similar policy already exists in policy.d Calling-Station-SSID is already defined.
I found rewrite_called_station_id which does what I need. However, it modifies Called-Station-Id and removes the SSID from the attribute. Now Called-Station-Id is copied from the outer eap into the inner eap tunnel. Called-Station-SSID is not copied, i.e. I don't have the SSID in the inner tunnel.
How can modify, which attributes are copied from the outer eap into the inner tunnel? Or how do I get the Called-Station-SSID into the inner tunnel?
update request { Called-Station-SSID := &outer.Called-Station-SSID } Not sure why it's not copied. Non protocol attributes should be forwarded when proxying to virtual servers. It's only when the request needs to be translated back to a RADIUS packet that they should be stripped. Feel free to open an issue on the github tracker. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2