Bruce Eckstein wrote:
I am trying to get freeradius to authorize the services on an Alvarion .. the following users were defined with these replies in the user file "wimax1@WIMAX.COM" Cleartext-Password := "wimax" Filter-Id = "SP=sp1:MSF=msf1;SP=sp_data_eth:MSF=msf_data_eth;", Session-Timeout = 1200, Termination-Action = RADIUS-Request "KeepAliveUserNameAndPassword" Cleartext-Password := "KeepAliveUserNameAndPassword" Filter-Id = "SP=sp1:MSF=msf1;SP=sp_data_eth:MSF=msf_data_eth;", Session-Timeout = 1200, Termination-Action = RADIUS-Request
Set "use_tunneled_reply" in raddb/modules/eap
fr seems to work. I see that the Filter-Id is indicated for the reply (see below).
The Access-Accept doesn't seem to contain Filter-Id.
The Alvarion CPE does get authenticated according to the CPE but there are no services defined for the CPE
sp1, msf1, sp_data_eth, and msf_data_eth are all defined in the BTS. What is it that I am missing in configuration of the FreeRadius?
If the Access-Accept contains the correct Filter-Id, then the Alvarion GW isn't applying the filter. Fix it, not FreeRADIUS. Alan DeKok.