Hi Experts I have checked the dictionary files and the attributes which are in existance; but i still get this error when i run debug mode. /usr/local/etc/raddb/users[157]: Parse error (check) for entry Alc-IPsec-Interface: Unknown attribute "" requires a hex string, not "private_ipsec" Errors reading /usr/local/etc/raddb/users /usr/local/etc/raddb/modules/files[7]: Instantiation failed for module "files" /usr/local/etc/raddb/sites-enabled/default[170]: Failed to load module "files". /usr/local/etc/raddb/sites-enabled/default[69]: Errors parsing authorize section. root@Radius-pst:~# The profile of my user is: steve Cleartext-Password := "testing" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 192.168.1.2, Framed-IP-Netmask = 255.255.255.0, Alc-IPsec-Interface = private_ipsec, Alc-IPsec-SA-Lifetime = 1200, Alc-IPsec-SA-Encr-Algorithm = aes128, Alc-IPsec-SA-Auth-Algorithm = sha1 Rgds On 24 June 2013 22:04, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
But when i comment the attributes the radtest is successful
did you check my other statement:
3) ensure that these attributes that you are using are in a
dictionary
file and that the dictionary file is being read by the server when
it
starts
well?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
George Innocent wrote:
I have checked the dictionary files and the attributes which are in existance; but i still get this error when i run debug mode.
Using FreeRADIUS requires a minimum amount of skill and documentation reading. You've edited the dictionaries without understanding how the dictionaries work. I'm not going to cut & paste the dictionary documentation here. The instructions already exist. Read the raddb/dictionary file, and "man dictionary". Alan DeKok.
Hi Alan; Thanks for the feed back but i have not edited the Dictionary file what i said i checked and confirmed that the attributes i have configured are available on dictionary for. On 25 June 2013 16:21, Alan DeKok <aland@deployingradius.com> wrote:
George Innocent wrote:
I have checked the dictionary files and the attributes which are in existance; but i still get this error when i run debug mode.
Using FreeRADIUS requires a minimum amount of skill and documentation reading. You've edited the dictionaries without understanding how the dictionaries work.
I'm not going to cut & paste the dictionary documentation here. The instructions already exist. Read the raddb/dictionary file, and "man dictionary".
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards: George Innocent.
George Innocent wrote:
Thanks for the feed back but i have not edited the Dictionary file what i said i checked and confirmed that the attributes i have configured are available on dictionary for.
The error message you're seeing comes because you did NOT follow the instructions for creating an entry in the "users" file. Your "users" file entry is WRONG. Follow the documentation. If you insist on ignoring instructions and ignoring documentation, you will be unsubscribed, and permanently banned from the list. We're here to help people. If you're not willing to help yourself, then we don't have time to help you, either. Alan DeKok.
Dear All, Am trying to have my users' credentials or attributes change say a when a user hits their expiry date, their profile drops to one that does not expire but can only get to a certain page, requesting them to renew their account, Some kind of redirection, but after account has expired. How best can i achieve this? Rgds EM
Hi,
Am trying to have my users' credentials or attributes change say a when a user hits their expiry date, their profile drops to one that does not expire but can only get to a certain page, requesting them to renew their account, Some kind of redirection, but after account has expired. How best can i achieve this?
depends ont he kit and technology being used....with 802.1X you could bump them onto a VLAN thats got a captive portal... with captive portal systems you can use one of thr WiSPr attributes to define the captive page (or whatever attribute the docs for your kit tells you to use). alan
Hi A.L.M, Am using pppoe. Eric M ________________________________ From: "A.L.M.Buxey@lboro.ac.uk" <A.L.M.Buxey@lboro.ac.uk> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Tuesday, June 25, 2013 9:31 PM Subject: Re: Freeradius radcheck change Hi,
Am trying to have my users' credentials or attributes change say a when a user hits their expiry date, their profile drops to one that does not expire but can only get to a certain page, requesting them to renew their account, Some kind of redirection, but after account has expired. How best can i achieve this?
depends ont he kit and technology being used....with 802.1X you could bump them onto a VLAN thats got a captive portal... with captive portal systems you can use one of thr WiSPr attributes to define the captive page (or whatever attribute the docs for your kit tells you to use). alan
On Wed, Jun 26, 2013 at 11:39 AM, Mulindwa <meric_l@yahoo.com> wrote:
Hi A.L.M,
Am using pppoe.
Short version, ask your pppoe vendor. Many pppoe BRAS appliances can put users on different networks/vlans depending on the value of some attributes in radius response. The attribute/value can be different depending on the vendor. Some ppoe server implementation (e.g. rp-pppoe, the common pppoe server software for linux) does not have that capability. If your pppoe server has that capability, then you should be able to implement Alan's suggestion. So again, ask your pppoe vendor. Once you find out which attribute/value needed on radius side, you can configure FR to return that (e.g using unlang). -- Fajar
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Fajar A. Nugraha -
George Innocent -
Mulindwa