Lol Alan you found the problem again! I just read the manual of "users" and "unlang" again and now I know clearly what the problem was... Thank you very much for the help! So radiusd -X won't show whether a check attribute was updated or not? Here is my radiusd -X output. It's the same no matter I use : or := ... ... ++? if ((Service-Type == 'Call-Check') && (User-Name =~ /^%{Calling-Station-ID}$/i)) -> TRUE ++- entering if ((Service-Type == 'Call-Check') && (User-Name =~ /^%{Calling-Station-ID}$/i)) {...} +++[control] returns noop ... It's supposed to update the "auth-type" value but nothing is shown whether the value has been successfully updated or not... Is this about right or it's actually showing at somewhere else and I am looking at the wrong place?? Thank you! Guest-tek, Difan Zhao difan.zhao@guest-tek.com www.guest-tek.com Office: 403-509-1010 ext 3048 Cell: 403-689-7514 -----Original Message----- From: freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradius.org [mailto:freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradi us.org] On Behalf Of Alan DeKok Sent: Monday, January 04, 2010 4:10 PM To: FreeRadius users mailing list Subject: Re: MAC authentication bypass ---How amIsupposedto?edit?theusersfileto include multiple MAC addresses?? Difan Zhao wrote:
To refresh your memory, I am doing MAC address authentication bypass. It
looks to me that the "users" file takes precedence than
"sites-available/default".
No. You are setting "Auth-Type = ..." in the "users" file, and then trying to se "Auth-Type = ..." *again* elsewhere. See "man unlang" for the meaning of the operators. If you want to over-ride a previous value, use ":=", not "=". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html