Yet another cropped up issue for me. I've got this in my users file: DEFAULT Prefix == "W", Auth-Type = "System" Service-Type == 0, Session-Timeout = 10, Fall-Through = No It's used by a perl script to do authentication. When the system attempts an authentication, I get a login failed for the username Wusername. Example: Mon Oct 17 11:07:43 2005 : Auth: Login incorrect: [Wusername/userpass] (from client webserver port 0) Any thoughts on something I could be doing wrong with the prefix? Thanks, Curt LeCaptain
I did find something out, that I apparently had as a mistake. You can use Prefix that way, but only with "Strip-User-Name = Yes" set in the users file. Apparently a better way of doing this is via hints, so I'll look into doing it that way. Curt LeCaptain
On 10/17/2005 at 12:49 pm, in message <20051017174925.B34F817127@mail.nitros9.org>, aland@ox.org wrote: "Curt LeCaptain" <lecaptainc@infinitytechnology.com> wrote: I've got this in my users file:
DEFAULT Prefix == "W", Auth-Type = "System"
I don't think Prefix works that way. Try using a regular expression comparison.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I want to make an option not to proxy accounting but log locally. What option can I take? Should I make a preproxy code for this function? Kevin
In order to test an application using radius, i'm using freeradius-0.9.3 I modify the script freeradius_sh.pl to change radius response I've got some trouble with response: 1) I can't put any attribute in a Reject response to an authorize : for example if I do the following $RAD_CHECK{'Auth-Type'} = "Reject"; $RAD_REPLY{'State'} = "30"; $RAD_REPLY{'Termination-Action'} = "0"; return 2; the network trace show there is no attribute in the response. 2) I try to add some Vendor-Specific Attribute in a radius response I do the following $RAD_REPLY{'Vendor-Specific'} = pack "N C C a*",$vendorId,$vsaId,length($value)+2,$value; $RAD_CHECK{'Auth-Type'} = "Accept"; return 2; The problem is that the first two octets of vendor specific are 0 and the freeradius truncate the response If someone could help me Thanks a lot
"David Deman" <ddeman@fr.netcentrex.net> wrote:
In order to test an application using radius, i'm using freeradius-0.9.3
You should really upgrade to 1.0.5.
1) I can't put any attribute in a Reject response to an authorize : for example if I do the following $RAD_CHECK{'Auth-Type'} = "Reject"; $RAD_REPLY{'State'} = "30"; $RAD_REPLY{'Termination-Action'} = "0"; return 2; the network trace show there is no attribute in the response.
The RFC's say no attributes are allowed in the Access-Reject. See the source code in src/main/ which enforces this.
2) I try to add some Vendor-Specific Attribute in a radius response I do the following $RAD_REPLY{'Vendor-Specific'} = pack "N C C a*",$vendorId,$vsaId,length($value)+2,$value;
Huh? Why not just refer to the attribute by name? That's what the dictionaries are for. Alan DeKok.
kevin wrote:
I want to make an option not to proxy accounting but log locally. What option can I take? Should I make a preproxy code for this function?
Remove any instance of the module "realm" (it's named "suffix" in the default config file) from the section "preacct". -- Nicolas Baradakis
participants (6)
-
Alan DeKok -
Curt LeCaptain -
David Deman -
Dusty Doris -
kevin -
Nicolas Baradakis