sending Group-Name in accounting Packets to FortiGate
Hi, I am forwarding accounting packets to fortiGate , but Group-Name is missing in this packet. Group-Name is coming in radacct table. So to show Group-Name i modified radacct table, after that it showed. So same need to do , i guess. Can you suggest where need to modify to get Group-Name in forwarding packet?
On Sep 18, 2018, at 10:07 AM, Somanath Mishra <somanath.mishra@planetsbrain.com> wrote:
I am forwarding accounting packets to fortiGate , but Group-Name is missing in this packet.
Because it's not an attribute that can go into a RADIUS packet. And what Fortigate documentation said to send it Group-Name? The system receiving the attribute has to know what to do with the attribute. You can't just invent an attribute, send it to a system, and expect the system to do something with it.
Group-Name is coming in radacct table. So to show Group-Name i modified radacct table, after that it showed. So same need to do , i guess. Can you suggest where need to modify to get Group-Name in forwarding packet?
Read the Fortigate documentation to see what attributes it supports. Then, configure FreeRADIUS to send those attributes. And don't send Group-Name. Fortigate doesn't support it. Alan DeKok.
yes, FortiGate need "ATTRIBUTE Fortinet‐Group‐Name 1 string". So where can i modify to send in packet? Do i need to modify dictionary files? please suggest me. On Tue, September 18, 2018 7:40 pm, Alan DeKok wrote:
On Sep 18, 2018, at 10:07 AM, Somanath Mishra <somanath.mishra@planetsbrain.com> wrote:
I am forwarding accounting packets to fortiGate , but Group-Name is missing in this packet.
Because it's not an attribute that can go into a RADIUS packet.
And what Fortigate documentation said to send it Group-Name? The system receiving the attribute has to know what to do with the attribute.
You can't just invent an attribute, send it to a system, and expect the system to do something with it.
Group-Name is coming in radacct table. So to show Group-Name i modified radacct table, after that it showed. So same need to do , i guess. Can you suggest where need to modify to get Group-Name in forwarding packet?
Read the Fortigate documentation to see what attributes it supports. Then, configure FreeRADIUS to send those attributes.
And don't send Group-Name. Fortigate doesn't support it.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 18, 2018, at 11:02 AM, Somanath Mishra <somanath.mishra@planetsbrain.com> wrote:
yes, FortiGate need "ATTRIBUTE Fortinet‐Group‐Name 1 string".
Which isn't the same as Group-Name.
So where can i modify to send in packet? Do i need to modify dictionary files? please suggest me.
The server contains many, many, examples of adding attributes to packets. Read the default config. Read "man unlang". if you want me to cut & paste the docs for you, that's just not going to happen. Alan DeKok.
participants (2)
-
Alan DeKok -
Somanath Mishra