Unknown or invalid value ":2:IPV4" for attribute Tunnel-Medium-Type
Hi, I are trying to upgrade from freeRadius 2.1.12 to 3.0.2. My current issue is with these three attributes "Tunnel-Type", Tunnel-Medium-Type" and "Tunnel-Preference". SQL query of radgroupreply MariaDB [radius]> select * from radgroupreply; | 1060 | Test-Group | Service-Type | = | Framed-User | | 1061 | Test-Group | Framed-Protocol | = | PPP | | 1062 | Test-Group | Framed-IP-Netmask | = | 255.255.255.255 | | 1063 | Test-Group | Framed-MTU | = | 1500 | | 1074 | Test-Group | Cisco-AVPair | += | ip:route=10.48.45.45 255.255.255.248 | | 1080 | Test-Group | Tunnel-Password | += | :1:askdfjwen23 | | 1082 | Test-Group | Tunnel-Server-Endpoint | += | :2:123.46.26.721 | | 1087 | Test-Group | Tunnel-Server-Auth-ID | += | :1:lks1-scaede.core | | 1088 | Test-Group | Tunnel-Client-Auth-ID | += | :1:bt-wbmc-wbc | | 1092 | Test-Group | Tunnel-Preference | += | :2:100 | | 1093 | Test-Group | Tunnel-Medium-Type | += | :2:IPV4 | | 1095 | Test-Group | Tunnel-Type | += | :1:L2TP | freeradius -X debug looks like this (0) sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id (0) sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'Test-Group' ORDER BY id (0) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'Test-Group' ORDER BY id (0) sql: ERROR: Error parsing value: Unknown or invalid value ":2:IPV4" for attribute Tunnel-Medium-Type (0) sql: ERROR: Error parsing user data from database result (0) sql: ERROR: Error retrieving reply pairs for group Test-Group rlm_sql (sql): Released connection (1) (0) [sql] = fail (0) } # authorize = fail (0) Invalid user (sql: Error parsing value: Unknown or invalid value ":2:IPV4" for attribute Tunnel-Medium-Type): [testuser] (from client windowspc port 0) (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query We never had any issue with freeRadius 2 but I don't understand why freeRadius 3 doesn't like the value of those 3 attributes. I looked in dictionary everything looks fine and matches with our freeradius 2. I am not sure what I am missing could you please point me to the right direction. Kind Regards, Aarif This email is security checked and subject to the disclaimer on web-page: https://www.capita.com/email-disclaimer.aspx
On Apr 14, 2021, at 10:49 AM, Khan, Aarif (IT Services) <Aarif.Khan@capita.com> wrote:
I are trying to upgrade from freeRadius 2.1.12 to 3.0.2.
Please use 3.0.21. There are a number of fixes, including critical security fixes. There is just no reason to use 3.0.2.
My current issue is with these three attributes "Tunnel-Type", Tunnel-Medium-Type" and "Tunnel-Preference". ... | 1080 | Test-Group | Tunnel-Password | += | :1:askdfjwen23 | | 1082 | Test-Group | Tunnel-Server-Endpoint | += | :2:123.46.26.721 | | 1087 | Test-Group | Tunnel-Server-Auth-ID | += | :1:lks1-scaede.core | | 1088 | Test-Group | Tunnel-Client-Auth-ID | += | :1:bt-wbmc-wbc | | 1092 | Test-Group | Tunnel-Preference | += | :2:100 | | 1093 | Test-Group | Tunnel-Medium-Type | += | :2:IPV4 | | 1095 | Test-Group | Tunnel-Type | += | :1:L2TP |
In v3, you have to move the tag to the attribute name. It should look like this: | 1080 | Test-Group | Tunnel-Password:1 | += | askdfjwen23 | | 1082 | Test-Group | Tunnel-Server-Endpoint:2 | += | 123.46.26.721 | | 1087 | Test-Group | Tunnel-Server-Auth-ID:1 | += | lks1-scaede.core | | 1088 | Test-Group | Tunnel-Client-Auth-ID:1 | += | bt-wbmc-wbc | | 1092 | Test-Group | Tunnel-Preference:2 | += | 100 | | 1093 | Test-Group | Tunnel-Medium-Type:2 | += | IPV4 | | 1095 | Test-Group | Tunnel-Type:1 | += | L2TP | Alan DeKok.
participants (2)
-
Alan DeKok -
Khan, Aarif (IT Services)