Not a freeradius question as such, but guess people on the list use eapol_test.
From the man page
-N attr spec Send arbitrary attribute specific by attr_id:syntax:value, or attr_id alone. attr_id should be the numeric ID of the attribute, and syntax should be one of 's' (string), 'd' (inte‐ ger), or 'x' (octet string). The value is the attribute value to send. When attr_id is given alone, NULL is used as the attribute value. Multiple attributes can be specified by using the option several times. so -N 61:d:19 means set NAS-Port-Type to be Wireless-802.11 ( val=19) Anyone know if I can specify a VSA attribute this way? is it just a case of VSA base val + attribute number ? Rgds Alex
On Nov 24, 2015, at 10:17 AM, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
Not a freeradius question as such, but guess people on the list use eapol_test. ... so -N 61:d:19 means set NAS-Port-Type to be Wireless-802.11 ( val=19) Anyone know if I can specify a VSA attribute this way? is it just a case of VSA base val + attribute number ?
You can't specify VSAs that way. Alan DeKok.
On 24 Nov 2015, at 10:49, Alan DeKok <aland@deployingradius.com> wrote:
On Nov 24, 2015, at 10:17 AM, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
Not a freeradius question as such, but guess people on the list use eapol_test. ... so -N 61:d:19 means set NAS-Port-Type to be Wireless-802.11 ( val=19) Anyone know if I can specify a VSA attribute this way? is it just a case of VSA base val + attribute number ?
You can't specify VSAs that way.
I'm sure Jouni would accept a patch though, it seems like useful behaviour. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On 24-11-15 16:17, Alex Sharaz wrote:
Not a freeradius question as such, but guess people on the list use eapol_test.
From the man page
-N attr spec Send arbitrary attribute specific by attr_id:syntax:value, or attr_id alone. attr_id should be the numeric ID of the attribute, and syntax should be one of 's' (string), 'd' (inte‐ ger), or 'x' (octet string). The value is the attribute value to send. When attr_id is given alone, NULL is used as the attribute value. Multiple attributes can be specified by using the option several times.
so -N 61:d:19 means set NAS-Port-Type to be Wireless-802.11 ( val=19) Anyone know if I can specify a VSA attribute this way? is it just a case of VSA base val + attribute number ?
Only if you construct the values yourself. For example: using -N 26:x:000000090109666f6f3d626172 results in Cisco-AVPair="foo=bar". Specifications on how to construct the VSAs can probably be found somewhere on the internet, I simply constructed a packet with radclient and copied the value that tcpdump showed :) -- Herwin Weststrate
o.k. thanks :-)) On 24 November 2015 at 17:02, Herwin Weststrate <herwin@quarantainenet.nl> wrote:
On 24-11-15 16:17, Alex Sharaz wrote:
Not a freeradius question as such, but guess people on the list use eapol_test.
From the man page
-N attr spec Send arbitrary attribute specific by attr_id:syntax:value, or attr_id alone. attr_id should be the numeric ID of the attribute, and syntax should be one of 's' (string), 'd' (inte‐ ger), or 'x' (octet string). The value is the attribute value to send. When attr_id is given alone, NULL is used as the attribute value. Multiple attributes can be specified by using the option several times.
so -N 61:d:19 means set NAS-Port-Type to be Wireless-802.11 ( val=19) Anyone know if I can specify a VSA attribute this way? is it just a case of VSA base val + attribute number ?
Only if you construct the values yourself. For example: using -N 26:x:000000090109666f6f3d626172 results in Cisco-AVPair="foo=bar". Specifications on how to construct the VSAs can probably be found somewhere on the internet, I simply constructed a packet with radclient and copied the value that tcpdump showed :)
-- Herwin Weststrate - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, Nov 24, 2015 at 06:02:44PM +0100, Herwin Weststrate wrote:
Only if you construct the values yourself. For example: using -N 26:x:000000090109666f6f3d626172 results in Cisco-AVPair="foo=bar". Specifications on how to construct the VSAs can probably be found somewhere on the internet, I simply constructed a packet with radclient and copied the value that tcpdump showed :)
At a complete guess after 2 seconds looking I would break that down as 00000009 length (of remaining octets 0109666f6f3d626172) 0109 Length (01) + cisco enterprise ID (09) ? or maybe 0109 is "Cisco-AVPair" 666f6f3d626172 foo=bar but there will be a proper RFC out there :) Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On 24 Nov 2015, at 12:55, Matthew Newton <mcn4@leicester.ac.uk> wrote:
On Tue, Nov 24, 2015 at 06:02:44PM +0100, Herwin Weststrate wrote:
Only if you construct the values yourself. For example: using -N 26:x:000000090109666f6f3d626172 results in Cisco-AVPair="foo=bar". Specifications on how to construct the VSAs can probably be found somewhere on the internet, I simply constructed a packet with radclient and copied the value that tcpdump showed :)
At a complete guess after 2 seconds looking I would break that down as
00000009 length (of remaining octets 0109666f6f3d626172)
00000009: Enterprise number 01: Vendor attribute number 09: Vendor length (includes attribute number and vendor length fields) 666f6f3d626172: Value -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On Tue, Nov 24, 2015 at 01:03:25PM -0500, Arran Cudbard-Bell wrote:
00000009 length (of remaining octets 0109666f6f3d626172)
00000009: Enterprise number
01: Vendor attribute number
09: Vendor length (includes attribute number and vendor length fields)
666f6f3d626172: Value
Gah! So close! :-) Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (5)
-
Alan DeKok -
Alex Sharaz -
Arran Cudbard-Bell -
Herwin Weststrate -
Matthew Newton