User profile is as follows: "test" Auth-Type := Local, User-Password == "test" Idle-Timeout = 300, Session-Timeout = 1560, Acct-Interim-Interval = 600, Account-Info = "QU;8000;4000;D;8000;4000", Reply-Message = Authenticated, Cisco-Account-Info = Axxx All attributes are returned in the Access-Accept message except for: Account-Info = "QU;8000;4000;D;8000;4000" Am I violating some sort of syntax restriction?
On Friday 15 September 2006 14:39, A. K. wrote:
User profile is as follows:
"test" Auth-Type := Local, User-Password == "test" Idle-Timeout = 300, Session-Timeout = 1560, Acct-Interim-Interval = 600, Account-Info = "QU;8000;4000;D;8000;4000", Reply-Message = Authenticated, Cisco-Account-Info = Axxx
All attributes are returned in the Access-Accept message except for:
Account-Info = "QU;8000;4000;D;8000;4000"
Am I violating some sort of syntax restriction?
$ grep Account-Info share/dictionary* share/dictionary.cisco:ATTRIBUTE Cisco-Account-Info 250 string In the default dictionary files, I see no Account-Info attribute. Did you add this to your local dictionary file? When you run freeradius in debug mode, do you see an error when it encounters that line? Kevin Bonner
Although it appears as Account-Info in dictionary.cisco, in the users file it has to be Cisco-Account-Info (some sort or automatic prepending occurs based on Vendor ID), so actually i was entering in the new VSA incorrectly. Changing it to Cisco-Account-Info creates a different problem. Only the first VSA of that name gets sent back in the Access-Accept response. Is this behavior configurable? On 9/15/06, Kevin Bonner <keb@pa.net> wrote:
On Friday 15 September 2006 14:39, A. K. wrote:
User profile is as follows:
"test" Auth-Type := Local, User-Password == "test" Idle-Timeout = 300, Session-Timeout = 1560, Acct-Interim-Interval = 600, Account-Info = "QU;8000;4000;D;8000;4000", Reply-Message = Authenticated, Cisco-Account-Info = Axxx
All attributes are returned in the Access-Accept message except for:
Account-Info = "QU;8000;4000;D;8000;4000"
Am I violating some sort of syntax restriction?
$ grep Account-Info share/dictionary*
share/dictionary.cisco:ATTRIBUTE Cisco-Account-Info 250 string
In the default dictionary files, I see no Account-Info attribute. Did you add this to your local dictionary file? When you run freeradius in debug mode, do you see an error when it encounters that line?
Kevin Bonner
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Friday 15 September 2006 15:52, A. K. wrote:
Although it appears as Account-Info in dictionary.cisco, in the users file it has to be Cisco-Account-Info (some sort or automatic prepending occurs based on Vendor ID), so actually i was entering in the new VSA incorrectly.
Where do you see Account-Info in dictionary.cisco? In my CVS and 1.1.3 installs of freeradius, it isn't there.
Changing it to Cisco-Account-Info creates a different problem. Only the first VSA of that name gets sent back in the Access-Accept response. Is this behavior configurable?
Your operators aren't correct. See http://wiki.freeradius.org/index.php/Operators Kevin Bonner
participants (2)
-
A. K. -
Kevin Bonner