FreeRadius trims value of the Cisco-AVPair attribute
If I execute a query: SELECT id AS AttrID, 'zhekha2' AS Login, attr AS AttrName, IPPhone.VoIP_GetAttrib('zhekha2','','',attr,'1','') AS AttrValue,':=' AS Oper FROM IPPhone.Attrib WHERE op IS NULL AND service=1 I have: # AttrID Login AttrName AttrValue Oper 1 3 zhekha Session-Timeout 0 := 2 4 zhekha h323-credit-time 0 := 3 5 zhekha h323-billing-model 0 := 4 7 zhekha Cisco-AVPair h323-ivr-in=terminal-alias:zhekha,0921877; := 5 9 zhekha XPGK_XROUTING_ROUTING := But in freeradius log I have: Sending Access-Accept of id 149 to 89.251.105.114 port 48099 Session-Timeout := "0" h323-credit-time := "0" h323-billing-model := "0" Cisco-AVPair := "h323" Finished request 10. What I do wrong?
cisco-vsa-hack *is* documented in sql howto: http://wiki.freeradius.org/SQL_HOWTO#Additional_Snippets Ivan Kalik Kalik Informatika ISP Dana 27/5/2008, "Evgeney Bakhtin" <zhekha@nsib.ru> piše:
If I execute a query: SELECT id AS AttrID, 'zhekha2' AS Login, attr AS AttrName, IPPhone.VoIP_GetAttrib('zhekha2','','',attr,'1','') AS AttrValue,':=' AS Oper FROM IPPhone.Attrib WHERE op IS NULL AND service=1
I have: # AttrID Login AttrName AttrValue Oper 1 3 zhekha Session-Timeout 0 := 2 4 zhekha h323-credit-time 0 := 3 5 zhekha h323-billing-model 0 := 4 7 zhekha Cisco-AVPair h323-ivr-in=terminal-alias:zhekha,0921877; := 5 9 zhekha XPGK_XROUTING_ROUTING :=
But in freeradius log I have: Sending Access-Accept of id 149 to 89.251.105.114 port 48099 Session-Timeout := "0" h323-credit-time := "0" h323-billing-model := "0" Cisco-AVPair := "h323" Finished request 10.
What I do wrong?
I don't need to use "cisco-vsa-hack", because I need to get not H323-Attribute = "h323-attribute=value" I need to have ... Cisco-AVPair := "h323-ivr-in=terminal-alias:zhekha,0921877" ... in radius-response. In freeradius-1.x.x I have it, but now I'm using freeradius-2.0.2 and it doesn't work. I have only Cisco-AVPair := "h323"
cisco-vsa-hack *is* documented in sql howto:
http://wiki.freeradius.org/SQL_HOWTO#Additional_Snippets
Ivan Kalik Kalik Informatika ISP
Dana 27/5/2008, "Evgeney Bakhtin" <zhekha@nsib.ru> piše:
If I execute a query: SELECT id AS AttrID, 'zhekha2' AS Login, attr AS AttrName, IPPhone.VoIP_GetAttrib('zhekha2','','',attr,'1','') AS AttrValue,':=' AS Oper FROM IPPhone.Attrib WHERE op IS NULL AND service=1
I have: # AttrID Login AttrName AttrValue Oper 1 3 zhekha Session-Timeout 0 := 2 4 zhekha h323-credit-time 0 := 3 5 zhekha h323-billing-model 0 := 4 7 zhekha Cisco-AVPair h323-ivr-in=terminal-alias:zhekha,0921877; := 5 9 zhekha XPGK_XROUTING_ROUTING :=
But in freeradius log I have: Sending Access-Accept of id 149 to 89.251.105.114 port 48099 Session-Timeout := "0" h323-credit-time := "0" h323-billing-model := "0" Cisco-AVPair := "h323" Finished request 10.
What I do wrong?
rad_recv: Access-Request packet from host 89.251.105.114 port 13579, id=174, length=133 User-Name = "zhekha2" CHAP-Password = 0xa702d002c89ee408c0fbd3b77b4be3d975 CHAP-Challenge = 0x483ccba2 NAS-IP-Address = 89.251.105.114 NAS-Identifier = "PCPhoneGK" NAS-Port-Type = Virtual Service-Type = Login-User Framed-IP-Address = 10.160.1.150 Cisco-AVPair = "h323-ivr-out=terminal-alias:zhekha2;" server GNUGK { +- entering group authorize ++[preprocess] returns ok rlm_chap: Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop rlm_realm: No '@' in User-Name = "zhekha2", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry zhekha2 at line 93 ++[files] returns ok expand: %{User-Name} -> zhekha2 rlm_sql (sql_for_GNUGK): sql_set_user escaped user --> 'zhekha2' rlm_sql (sql_for_GNUGK): Reserving sql socket id: 3 expand: SELECT 1, Login, 'User-Password', PassField, ':=' FROM SQLUser.Abonent WHERE Login = '%{SQL-User-Name}' AND IPPhone.VoIP_AuthCall('%{SQL-User-Name}','%{Called-Station-Id}','%{Calling-Station-Id}','%{h323-remote-address}','%{h323-gw-address}','%{h323-call-origin}')='1' ORDER BY ID -> SELECT 1, Login, 'User-Password', PassField, ':=' FROM SQLUser.Abonent WHERE Login = 'zhekha2' AND IPPhone.VoIP_AuthCall('zhekha2','','','','','')='1' ORDER BY ID rlm_sql: SELECT 1, Login, 'User-Password', PassField, ':=' FROM SQLUser.Abonent WHERE Login = 'zhekha2' AND IPPhone.VoIP_AuthCall('zhekha2','','','','','')='1' ORDER BY ID rlm_sql (sql_for_GNUGK): User found in radcheck table expand: SELECT id AS AttrID, '%{SQL-User-Name}' AS Login, attr AS AttrName, IPPhone.VoIP_GetAttrib('%{SQL-User-Name}','','',attr,'1','') AS AttrValue,':=' AS Oper FROM IPPhone.Attrib WHERE op IS NULL AND service=1 -> SELECT id AS AttrID, 'zhekha2' AS Login, attr AS AttrName, IPPhone.VoIP_GetAttrib('zhekha2','','',attr,'1','') AS AttrValue,':=' AS Oper FROM IPPhone.Attrib WHERE op IS NULL AND service=1 rlm_sql: SELECT id AS AttrID, 'zhekha2' AS Login, attr AS AttrName, IPPhone.VoIP_GetAttrib('zhekha2','','',attr,'1','') AS AttrValue,':=' AS Oper FROM IPPhone.Attrib WHERE op IS NULL AND service=1 rlm_sql (sql_for_GNUGK): Released sql socket id: 3 ++[sql_for_GNUGK] returns ok ++[expiration] returns noop ++[logintime] returns noop rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type CHAP auth: type "CHAP" +- entering group CHAP rlm_chap: login attempt by "zhekha2" with CHAP password rlm_chap: Using clear text password "XXXXXXXXXX" for user zhekha2 authentication. rlm_chap: chap user zhekha2 authenticated succesfully ++[chap] returns ok Login OK: [zhekha2/<CHAP-Password>] (from client gnugk port 0) } # server GNUGK Sending Access-Accept of id 174 to 89.251.105.114 port 13579 Session-Timeout := "0" h323-credit-time := "0" h323-billing-model := "0" Cisco-AVPair := "h323" h323-ivr-in := "term" Finished request 1. Going to the next request Waking up in 0.9 seconds. Waking up in 4.0 seconds. Cleaning up request 1 ID 174 with timestamp +53250 Ready to process requests.
Hi,
Attaching output from a debug run (with -X) might help.
kind regards Pshem - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Evgeney Bakhtin wrote:
I don't need to use "cisco-vsa-hack", because I need to get not H323-Attribute = "h323-attribute=value" I need to have ... Cisco-AVPair := "h323-ivr-in=terminal-alias:zhekha,0921877" ... in radius-response.
In freeradius-1.x.x I have it, but now I'm using freeradius-2.0.2 and it doesn't work. I have only
Cisco-AVPair := "h323"
It works for me with CVS head. Try upgrading to 2.0.4. Maybe that will help... Alan DeKok.
participants (4)
-
Alan DeKok -
Evgeney Bakhtin -
Ivan Kalik -
Pshem Kowalczyk