Good afternoon,
Sorry to bother you guys again! I am trying to authenticate
Windows XP PCs (sp2) with their hostnames. It looks like PC will try to use its
hostname (in format host/<computer_name.domainname>) to authenticate when
no user is logged in.
I configured the “users” file and also the post-auth
section of “default” file to force accepting the request. In the
debug it shows it does accept and send back the response. I also captured the
packets in the wireshark. However the NAS (Cisco 3750 switch with newest
firmware) doesn’t take it and simply ignored it and send the request
again. It repeated three times and eventually failed…
Users file:
host/neteng-sp1.gtcorp.com
Auth-Type := Accept
Tunnel-Type:0 = VLAN,
Tunnel-Medium-Type:0 = IEEE-802,
Tunnel-Private-Group-Id:0 = "3",
Tunnel-Preference = 0x000000
Sites-available/default file:
post-auth {
…
if(request:User-Name == "host/neteng-sp1.gtcorp.com"){
update reply {
Auth-Type := Accept
Tunnel-Type = VLAN
Tunnel-Medium-Type = IEEE-802
Tunnel-Private-Group-ID = 3
Tunnel-Preference = 0
}
}
…
}
Actually it doesn’t look like it’s Freeradiusd’s
problem since it did send back the response. It’s the NAS which doesn’t
process the reply... However does anybody know why? Did I miss any attributes?
Anyway to work around this problem?
Alan, I think you told me once that it’s not easy to fool
the NAS to accept all requests… Is this one of the case we are talking
about??
Thank you and have a good weekend!
|
|
Difan Zhao Network Engineer Office: 403-509-1010 ext 3048 Cell: 403-689-7514 |
|
|
|
|
