Users file formatting
Hi list, This is hopefully a simple question. I've been using a simple users file to authenticate a handful of users that don't exist in AD with entries like this, which works: test-account1 Cleartext-Password := "password", MS-CHAP-Use-NTLM-Auth := no I also want to have a couple of test accounts that are restricted to MAC addresses. test-account2 Cleartext-Password := 'password', Calling-Station-Id == "00:11:22:33:44:55", MS-CHAP-Use-NTLM-Auth := no However radius -XC bombs out with "Unexpected trailing comma in check item list for entry test-account2" According to the manpage for the users file, I've formatted it correctly with commas between each check-item. I wondered if MS-CHAP-Use-NTLM-Auth was a reply-item so I tried to move it onto its own line with a tab, but this throws "Parse error (reply) for entry test-account2 (unknown error)" Can anyone advise on how to format users entries like this, and even if it is possible to require specific mac addresses in this way? Thanks, Jonathan
On Feb 18, 2015, at 7:53 AM, Jonathan Gazeley <Jonathan.Gazeley@bristol.ac.uk> wrote:
This is hopefully a simple question. I've been using a simple users file to authenticate a handful of users that don't exist in AD with entries like this, which works:
test-account1 Cleartext-Password := "password", MS-CHAP-Use-NTLM-Auth := no
OK.
I also want to have a couple of test accounts that are restricted to MAC addresses.
test-account2 Cleartext-Password := 'password', Calling-Station-Id == "00:11:22:33:44:55", MS-CHAP-Use-NTLM-Auth := no
That should work. And in fact, works for me in my tests.
However radius -XC bombs out with "Unexpected trailing comma in check item list for entry test-account2”
There’s probably *another* entry for the same user. That one has the wrong format. Which version are you running? Alan DeKok.
On 18/02/15 13:11, Alan DeKok wrote:
I also want to have a couple of test accounts that are restricted to MAC addresses.
test-account2 Cleartext-Password := 'password', Calling-Station-Id == "00:11:22:33:44:55", MS-CHAP-Use-NTLM-Auth := no That should work. And in fact, works for me in my tests.
However radius -XC bombs out with "Unexpected trailing comma in check item list for entry test-account2” There’s probably *another* entry for the same user. That one has the wrong format.
Which version are you running?
We're running 2.2.5 pending management approval to upgrade to 2.2.6. I found the cause of the problem, though. There was a comment at the end of the line - this was causing the "unexpected trailing comma" message which wasn't immediately obvious to me. Thanks for your help. Cheers, Jonathan
On Feb 18, 2015, at 8:58 AM, Jonathan Gazeley <Jonathan.Gazeley@bristol.ac.uk> wrote:
We're running 2.2.5 pending management approval to upgrade to 2.2.6. I found the cause of the problem, though. There was a comment at the end of the line - this was causing the "unexpected trailing comma" message which wasn't immediately obvious to me.
This is why you should post the EXACT TEXT which is causing the problem. Alan DeKok.
participants (2)
-
Alan DeKok -
Jonathan Gazeley