Support for specific Cisco-Attributes
Hello, I'm trying to use attributes like: Cisco-Enc += "xyz=1" Cisco-SSG-Account-Info += "Aratelimit(up=2000,down=2000)" where I get the following errors: /etc/freeradius/users[101]: Parse error (reply) for entry the-bob-10-v4v6-28@example.org: Invalid octet string "xyz=1" for attribute name "Cisco-Enc" Errors reading /etc/freeradius/users /etc/freeradius/modules/files[7]: Instantiation failed for module "files" /etc/freeradius/sites-enabled/inner-tunnel[124]: Failed to load module "files". /etc/freeradius/sites-enabled/inner-tunnel[47]: Errors parsing authorize section. /etc/freeradius/users[113]: Parse error (reply) for entry the-bob-10-v4v6-28@example.org: Invalid octet string "Aratelimit(up=2000,down=2000)" for attribute name "Cisco-SSG-Account-Info" Errors reading /etc/freeradius/users /etc/freeradius/modules/files[7]: Instantiation failed for module "files" /etc/freeradius/sites-enabled/inner-tunnel[124]: Failed to load module "files". /etc/freeradius/sites-enabled/inner-tunnel[47]: Errors parsing authorize section. Without these attributes all is working as expected. I tried this with combinations of Ubuntu 12.04.4, 13.10 and FreeRadius 2.1.10 (via apt-get), FreeRadius 2.2.3 and 3.0.1 (via configure/make/install) all in VMware. When going via install I preceded this with: - sudo apt-get install gcc make build-essential - sudo apt-get install libtalloc-dev to prevent concerning errors. A colleague uses above with success with 2.1.10, so I consider any setting missing. I tried to keep the config-files provided with the distribution but understood required to: - a client-entry in clients.conf for my router - listen-commands to radiusd.conf for own ip and to adjust the port to 1645/1646 - 2 user-entries in users So far I didn't try to copy his setup over, but if one proposes it, I'd give it a try. If a specific software is required or a knob is missing, I appreciated some feedback. Kind Regards, Andreas
Andreas Kalb (akalb) wrote:
Hello,
I'm trying to use attributes like:
Cisco-Enc += "xyz=1" Cisco-SSG-Account-Info += "Aratelimit(up=2000,down=2000)"
Which aren't in the standard dictionaries.
where I get the following errors:
Yes. You can't just invent names and expect them to work. They have to be defined in the dictionaries.
A colleague uses above with success with 2.1.10, so I consider any setting missing.
No. You should believe that he edited his local dictionaries to add these attributes. Alan DeKok.
Hello Alan, thx for the knob ;-) He himself din't point me to it, so sorry for noising. Kind Regards, Andreas On 07.02.2014, at 17:52, Alan DeKok <aland@deployingradius.com> wrote:
Andreas Kalb (akalb) wrote:
Hello,
I'm trying to use attributes like:
Cisco-Enc += "xyz=1" Cisco-SSG-Account-Info += "Aratelimit(up=2000,down=2000)"
Which aren't in the standard dictionaries.
where I get the following errors:
Yes. You can't just invent names and expect them to work. They have to be defined in the dictionaries.
A colleague uses above with success with 2.1.10, so I consider any setting missing.
No. You should believe that he edited his local dictionaries to add these attributes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Andreas Kalb (akalb)