Hi, I have read freeradius wiki and other topic on this forum concerning this thread but I did not find anything useful. I have problems whit Access Accept packet. I have put few attributes in radgroupreply. Now I can see attributes in Access Accept packet. Problem is that I have put manually values for attributes in Accept packet (values should be from Access-Request) . How can I add attributes values which was send in Access-Request to be send back in Access Accept? Thank you very much! BR, Miha -- View this message in context: http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4832711.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
update reply { attributesName = %{request:attributesValue} } see man unlang for details regards Le 23/09/2011 09:47, Miha a écrit :
Hi,
I have read freeradius wiki and other topic on this forum concerning this thread but I did not find anything useful. I have problems whit Access Accept packet. I have put few attributes in radgroupreply. Now I can see attributes in Access Accept packet. Problem is that I have put manually values for attributes in Accept packet (values should be from Access-Request) . How can I add attributes values which was send in Access-Request to be send back in Access Accept?
Thank you very much!
BR, Miha
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4832711.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- <http://www.horoa.net> Alexandre Chapellon Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
Hi, in radgroupreplay I have defined attribute 3GPP2-Prepaid-acct-Capability and put some value to it. I know this is wrong because this value should be dynamically get from Access-Request (attribute 3GPP2-Prepaid-acct-Capability). update reply { 3GPP2-Prepaid-acct-Capability= %{request:3GPP2-Prepaid-acct-Capability} } Is this right? If I am right this must I put in radiusd.conf ? Thanks! BR, Miha On 9/23/2011 2:00 PM, Alan DeKok wrote:
Miha wrote:
Problem is that I have put manually values for attributes in Accept packet (values should be from Access-Request) . What does that mean?
How do you "manually add values" ?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi @Alen and @Alexandra, Hi, in radgroupreplay I have defined attribute 3GPP2-Prepaid-acct-Capability and put some value to it. I know this is wrong because this value should be dynamically get from Access-Request (attribute 3GPP2-Prepaid-acct-Capability). update reply { 3GPP2-Prepaid-acct-Capability = %{request:attributesValue} } What should be attributesValue if I whould like that attributesValue is value from Access-Request (attribute 3GPP2-Prepaid-acct-Capability)? If I am right this must I put in sites-available/default ? I have put it in default but replay is being sent in Accounting-Response packet. Thanks! BR, Miha -- View this message in context: http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4833410.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
Le 23/09/2011 15:03, Miha a écrit :
Hi @Alen and @Alexandra,
Hi,
in radgroupreplay I have defined attribute 3GPP2-Prepaid-acct-Capability and put some value to it. I know this is wrong because this value should be dynamically get from Access-Request (attribute 3GPP2-Prepaid-acct-Capability).
update reply { 3GPP2-Prepaid-acct-Capability = %{request:attributesValue} }
What should be attributesValue if I whould like that attributesValue is value from Access-Request (attribute 3GPP2-Prepaid-acct-Capability)? Sorry I am not clear in this example:
update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} } I remember Alan told this was an ugly setup but worked (I use it somewhere in my config)
If I am right this must I put in sites-available/default ? Yep in post-auth I guess.
I have put it in default but replay is being sent in Accounting-Response packet.
Thanks!
BR, Miha
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4833410.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- <http://www.horoa.net> Alexandre Chapellon Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
@Alexandre, thanks a lot for this!!!! Sending Access-Accept of id 221 to 212.13.228.58 port 57366 3GPP2-Session-Termination-Capability = 1 3GPP2-Prepaid-acct-Capability = 0x257b726571756573743a33475050322d507265706169642d616363742d4361706162696c6974797d Acct-Multi-Session-Id = "%{request:Acct-Multi-Session-Id}" Do you have any idea why Acct-Multi-Session-Id is not getting value? I thought that it is missing in dictionary but I can see that I have it dictionary (dictionary.rfc2866). BR, Miha On 9/23/2011 3:38 PM, Alexandre Chapellon wrote:
Le 23/09/2011 15:03, Miha a écrit :
Hi @Alen and @Alexandra,
Hi,
in radgroupreplay I have defined attribute 3GPP2-Prepaid-acct-Capability and put some value to it. I know this is wrong because this value should be dynamically get from Access-Request (attribute 3GPP2-Prepaid-acct-Capability).
update reply { 3GPP2-Prepaid-acct-Capability = %{request:attributesValue} }
What should be attributesValue if I whould like that attributesValue is value from Access-Request (attribute 3GPP2-Prepaid-acct-Capability)? Sorry I am not clear in this example: update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} } I remember Alan told this was an ugly setup but worked (I use it somewhere in my config)
If I am right this must I put in sites-available/default ? Yep in post-auth I guess.
I have put it in default but replay is being sent in Accounting-Response packet.
Thanks!
BR, Miha
-- View this message in context:http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4833410.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
Alexandre Chapellon
Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Le 23/09/2011 15:54, Miha Zoubek a écrit :
@Alexandre,
thanks a lot for this!!!!
Sending Access-Accept of id 221 to 212.13.228.58 port 57366 3GPP2-Session-Termination-Capability = 1 3GPP2-Prepaid-acct-Capability = 0x257b726571756573743a33475050322d507265706169642d616363742d4361706162696c6974797d Acct-Multi-Session-Id = "%{request:Acct-Multi-Session-Id}"
Do you have any idea why Acct-Multi-Session-Id is not getting value? I thought that it is missing in dictionary but I can see that I have it dictionary (dictionary.rfc2866). don't you have single quotes somewhere that would prevent variable expansion?
BR, Miha
On 9/23/2011 3:38 PM, Alexandre Chapellon wrote:
Le 23/09/2011 15:03, Miha a écrit :
Hi @Alen and @Alexandra,
Hi,
in radgroupreplay I have defined attribute 3GPP2-Prepaid-acct-Capability and put some value to it. I know this is wrong because this value should be dynamically get from Access-Request (attribute 3GPP2-Prepaid-acct-Capability).
update reply { 3GPP2-Prepaid-acct-Capability = %{request:attributesValue} }
What should be attributesValue if I whould like that attributesValue is value from Access-Request (attribute 3GPP2-Prepaid-acct-Capability)? Sorry I am not clear in this example: update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} } I remember Alan told this was an ugly setup but worked (I use it somewhere in my config)
If I am right this must I put in sites-available/default ? Yep in post-auth I guess.
I have put it in default but replay is being sent in Accounting-Response packet.
Thanks!
BR, Miha
-- View this message in context:http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4833410.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
Alexandre Chapellon
Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
- List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- <http://www.horoa.net> Alexandre Chapellon Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
Hi @Alexandre, here is a copy from me default file: post-auth { # Get an address from the IP Pool. # main_pool update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} } update reply { Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id} } I have also try this way, but still the same: update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id} } I do not see any problem with quotes. Thank you! Br, Miha -- View this message in context: http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4834972.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
Le 23/09/2011 22:01, Miha a écrit :
Hi @Alexandre,
here is a copy from me default file:
post-auth { # Get an address from the IP Pool. # main_pool update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability}
}
update reply { Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id}
} IIRC I use double quotedvariables in my config. Anyway, this is odd it happens for the second attributes and not the first one.
I have also try this way, but still the same:
update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id}
} This sounds better. I do not see any problem with quotes.
Thank you!
Br, Miha
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4834972.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- <http://www.horoa.net> Alexandre Chapellon Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
Hi @Alexandre, I add this to my post-auth { } section: update reply { 3GPP2-Prepaid-acct-Capability =%{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id =%{request:Acct-Multi-Session-Id} 3GPP2-Session-Termination-Capability =%{request:3GPP2-Session-Termination-Capability} 3GPP2-Release-Indicator =%{request:3GPP2-Release-Indicator} } From the debug I get: } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load /etc/raddb/sites-enabled/default[462]: ERROR: Unknown value %{request:3GPP2-Session-Termination-Capability} for attribute 3GPP2-Session-Termination-Capability /etc/raddb/sites-enabled/default[456]: Errors parsing post-auth section. Why I am getting 3GPP2-Session-Termination-Capability as unknown value (I have this attribute in my dictionaries) as this value (value of 3GPP2-Session-Termination-Capability attribute) is send in access-request packet? For 3GPP2-Session-Termination-Capability =%{request:3GPP2-Session-Termination-Capability} I am still getting Acct-Multi-Session-Id = "%{request:Acct-Multi-Session-Id}". Here is access-request from Wireshark for batter pictre: access-request: Attribute Value Pairs AVP: l=15 t=Acct-Multi-Session-Id(50): 1317016867140 (I need this one in access-accept) Acct-Multi-Session-Id: 1317016867140 AVP: l=41 t=Vendor-Specific(26) v=Cisco(9) VSA: l=35 t=Unknown-Attribute(130): 683332332d63616c6c696e672d656e74657270726973652d... Unknown-Attribute: 683332332d63616c6c696e672d656e74657270726973652d... AVP: l=10 t=Calling-Station-Id(31): 81609000 Calling-Station-Id: 81609000 AVP: l=13 t=NAS-Identifier(32): intraswitch AVP: l=6 t=NAS-IP-Address(4): xxx.xxx.xxx.xxx AVP: l=14 t=Vendor-Specific(26) v=3GPP2(5535) (I need this one in access-accept) VSA: l=8 t=3GPP2-Prepaid-acct-Capability(91): 010600000002 3GPP2-Prepaid-acct-Capability: 010600000002 AVP: l=12 t=Vendor-Specific(26) v=3GPP2(5535) (I need this one in access-accept) VSA: l=6 t=3GPP2-Session-Termination-Capability(88): 1 3GPP2-Session-Termination-Capability: 1 AVP: l=34 t=Vendor-Specific(26) v=Cisco(9) VSA: l=28 t=h323-conf-id(24): h323-conf-id=1317016867140 h323-conf-id: h323-conf-id=1317016867140 AVP: l=6 t=Vendor-Specific(26) v=Cisco(9) AVP: l=6 t=Event-Timestamp(55): Sep 26, 2011 08:01:07.000000000 Central Europe Daylight Time AVP: l=11 t=User-Name(1): 081609000 AVP: l=18 t=User-Password(2): Encrypted Thank you! BR, Miha On 9/24/2011 2:43 PM, Alexandre Chapellon wrote:
Le 23/09/2011 22:01, Miha a écrit :
Hi @Alexandre,
here is a copy from me default file:
post-auth { # Get an address from the IP Pool. # main_pool update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability}
}
update reply { Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id}
} IIRC I use double quotedvariables in my config. Anyway, this is odd it happens for the second attributes and not the first one.
I have also try this way, but still the same:
update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id}
} This sounds better. I do not see any problem with quotes.
Thank you!
Br, Miha
-- View this message in context:http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4834972.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
Alexandre Chapellon
Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Miha Zoubek wrote:
I add this to my post-auth { } section:
update reply { 3GPP2-Prepaid-acct-Capability =%{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id =%{request:Acct-Multi-Session-Id} 3GPP2-Session-Termination-Capability =%{request:3GPP2-Session-Termination-Capability} 3GPP2-Release-Indicator =%{request:3GPP2-Release-Indicator}
Put quotes around the values, as suggested in another email, and in the "unlang" documentation. 3GPP2-Release-Indicator = "%{3GPP2-Release-Indicator}" And you don't need the "request" portion. The documentation says the "request" list is used by default. Alan DeKok.
Hi, thank you for all your help!! Now it works perfectly!! Br, Miha On 9/26/2011 10:58 AM, Alan DeKok wrote:
Miha Zoubek wrote:
I add this to my post-auth { } section:
update reply { 3GPP2-Prepaid-acct-Capability =%{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id =%{request:Acct-Multi-Session-Id} 3GPP2-Session-Termination-Capability =%{request:3GPP2-Session-Termination-Capability} 3GPP2-Release-Indicator =%{request:3GPP2-Release-Indicator} Put quotes around the values, as suggested in another email, and in the "unlang" documentation.
3GPP2-Release-Indicator = "%{3GPP2-Release-Indicator}"
And you don't need the "request" portion. The documentation says the "request" list is used by default.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
@Alexandre, I have one more question. I am looking at this post post-auth { } section. I can see that the values are not added to attributes in access-accept. For example: Module: Checking post-auth {...} for more modules to load /etc/raddb/sites-enabled/default[460]: ERROR: Failed to find IP address for %{request:NAS-IP-Address} /etc/raddb/sites-enabled/default[456]: Errors parsing post-auth section. if I look in access-reqest section (I have comment %{request:NAS-IP-Address}): Ready to process requests. rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx port 40239, id=140, length=206 Acct-Multi-Session-Id = "1317025759333" Cisco-Attr-130 = 0x683332332d63616c6c696e672d656e74657270726973652d69643d656e74504258 Calling-Station-Id = "81609000" NAS-Identifier = "intraswitch" NAS-IP-Address = xxx.xxx.xxx.xxx 3GPP2-Prepaid-acct-Capability = 0x010600000002 3GPP2-Session-Termination-Capability = 1 h323-conf-id = "h323-conf-id=1317025759333" Vendor-Specific = 0x00000009 Event-Timestamp = "Sep 26 2011 10:29:19 CEST" User-Name = "081609000" User-Password = "1122" I can see that the ip from NAS is send. If I have this line written (NAS-IP-Address = %{request:NAS-IP-Address}) the radius will not start. Should this be add the any other section then post-auth {...}? BR, MIha On 9/24/2011 2:43 PM, Alexandre Chapellon wrote:
Le 23/09/2011 22:01, Miha a écrit :
Hi @Alexandre,
here is a copy from me default file:
post-auth { # Get an address from the IP Pool. # main_pool update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability}
}
update reply { Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id}
} IIRC I use double quotedvariables in my config. Anyway, this is odd it happens for the second attributes and not the first one.
I have also try this way, but still the same:
update reply { 3GPP2-Prepaid-acct-Capability = %{request:3GPP2-Prepaid-acct-Capability} Acct-Multi-Session-Id = %{request:Acct-Multi-Session-Id}
} This sounds better. I do not see any problem with quotes.
Thank you!
Br, Miha
-- View this message in context:http://freeradius.1045715.n5.nabble.com/Access-Accept-tp4832711p4834972.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
Alexandre Chapellon
Ingénierie des systèmes open sources et réseaux. Follow me on twitter: @alxgomz <http://www.twitter.com/alxgomz>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Alexandre Chapellon -
Miha -
Miha Zoubek