Framed-IP-Address null value
Hello all! Im testing freeradius in a preproduction machine. I've configured It with freeradius + Ldap. At this moment I only need read from ldap these attributes: user, password and Framed-IP-Address to assing an IP to an specific User. The problem cames when i use this: in /etc/freeradius/sites-enable/default (authorize section) update reply { Framed-IP-Address := "%{Client-IP-Address}" } I got the following error in debug mode: ++? if (NAS-Port-Type == 'Ethernet') ? Evaluating (NAS-Port-Type == 'Ethernetl') -> TRUE ++? if (NAS-Port-Type == 'Ethernet') -> TRUE ++- entering if (NAS-Port-Type == 'Ethernet') {...} expand: %{Framed-IP-Address} -> ERROR: Failed parsing value "" for attribute Framed-IP-Address: Failed to find IP address for But if I change %{Framed-IP-Address} this for %{Client-IP-Address}, just to check if the query is right. I got the result expected "The client IP Address". Can someone give me some light on the issue? Thanks very much. Álex
Alejandro Gandara wrote:
The problem cames when i use this: .. update reply { Framed-IP-Address := "%{Client-IP-Address}" }
That is completely and totally wrong. You are telling the end user that he can use the IP address assigned to the NAS.
But if I change %{Framed-IP-Address} this for %{Client-IP-Address}, just to check if the query is right. I got the result expected "The client IP Address".
Can someone give me some light on the issue?
No idea. It works for me. Alan DeKok.
2011/10/17 Alan DeKok <aland@deployingradius.com>
Alejandro Gandara wrote:
The problem cames when i use this: .. update reply { Framed-IP-Address := "%{Client-IP-Address}" }
Sorry I meant Framed-IP-Address := "%{Framed-IP-Address}"
That is completely and totally wrong. You are telling the end user that he can use the IP address assigned to the NAS.
But if I change %{Framed-IP-Address} this for %{Client-IP-Address}, just to check if the query is right. I got the result expected "The client IP Address".
Can someone give me some light on the issue?
No idea. It works for me.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, Oct 17, 2011 at 11:26 PM, Alejandro Gandara <agandara@optaresolutions.com> wrote:
2011/10/17 Alan DeKok <aland@deployingradius.com>
Alejandro Gandara wrote:
The problem cames when i use this: .. update reply { Framed-IP-Address := "%{Client-IP-Address}" }
Sorry I meant Framed-IP-Address := "%{Framed-IP-Address}"
That is wrong in so many ways. Instead of asking "why it doesn't work" (which it does, sort of. It does something stupid because you tell it to do something stupid), why don't you explain in detail what you're trying to do. You mentioned LDAP. Did you look at ldap.attrmap? Did you put it on the correct ldap attribute name? When properly configured, you shouldn't need the update reply block. -- Fajar
participants (5)
-
Alan Buxey -
Alan DeKok -
Alejandro Gandara -
Alejandro Gandara -
Fajar A. Nugraha