Although it appears as Account-Info in dictionary.cisco, in the users file it has to be Cisco-Account-Info (some sort or automatic prepending occurs based on Vendor ID), so actually i was entering in the new VSA incorrectly. Changing it to Cisco-Account-Info creates a different problem. Only the first VSA of that name gets sent back in the Access-Accept response. Is this behavior configurable? On 9/15/06, Kevin Bonner <keb@pa.net> wrote:
On Friday 15 September 2006 14:39, A. K. wrote:
User profile is as follows:
"test" Auth-Type := Local, User-Password == "test" Idle-Timeout = 300, Session-Timeout = 1560, Acct-Interim-Interval = 600, Account-Info = "QU;8000;4000;D;8000;4000", Reply-Message = Authenticated, Cisco-Account-Info = Axxx
All attributes are returned in the Access-Accept message except for:
Account-Info = "QU;8000;4000;D;8000;4000"
Am I violating some sort of syntax restriction?
$ grep Account-Info share/dictionary*
share/dictionary.cisco:ATTRIBUTE Cisco-Account-Info 250 string
In the default dictionary files, I see no Account-Info attribute. Did you add this to your local dictionary file? When you run freeradius in debug mode, do you see an error when it encounters that line?
Kevin Bonner
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html