Multiple Replay-Message attributes in the ACCESS-ACCEPT message
Hi all, The script which is invoked by Exec-Program-Wait attribute produces the output similar to the following: Reply-Message=c5|c3|c14|, Reply-Message=ci5|c14|, Reply-Message=done So I expect to see three Replay-Message attributes in the ACCESS-ACCEPT message. According to the FreeRadius docs multiple Replay-Message are allowed. But for some reason the response contains only one (the first) attribute. Here is the RADIUS output: Login OK: [jsullivan/<no User-Password attribute>] (from client localhost port 0) Exec-Program-Wait: value-pairs: Reply-Message=c5|c3|c14|, Reply-Message=ci5|c14|, Reply-Message=done Exec-Program: returned: 0 Login OK: [jsullivan/<no User-Password attribute>] (from client localhost port 0 cli 00-00-39-75-F8-39) Sending Access-Accept of id 30 to 127.0.0.1 port 2396 MS-MPPE-Recv-Key = 0x516de53a5daa0328a4eef843b1b708b9fae38fd499bea816abe3c9627423031b MS-MPPE-Send-Key = 0x8bbb3efff8abed1c71fb3e9ddd97503b8c9da2725a6e8061b8d2551a2b4ee9bf EAP-Message = 0x03110004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "jsullivan" Reply-Message = "c5|c3|c14|" Any ideas what is going on? Thanks, Mike
Michael Alexeev wrote:
The script which is invoked by Exec-Program-Wait attribute produces the output similar to the following:
Reply-Message=c5|c3|c14|, Reply-Message=ci5|c14|, Reply-Message=done
That is *not* the normal format for attributes. See "man users".
So I expect to see three Replay-Message attributes in the ACCESS-ACCEPT message. According to the FreeRadius docs multiple Replay-Message are allowed. But for some reason the response contains only one (the first) attribute.
See "man users". Look at the operators section. Alan DeKok.
participants (2)
-
Alan DeKok -
Michael Alexeev