Re: ntlm_auth "--require-membership-of" breaks eap-conversation
Yes, i get the Groupname out of the DB : Huntgroup-Name := "%{sql:select groupname from radhuntgroup where nasipaddress=\"%{NAS-IP-Address}\"}" mysql> select * from radhuntgroup; +----+---------------------------+----------------+-----------+ | id | groupname | nasipaddress | nasportid | +----+---------------------------+----------------+-----------+ ...... | 5 | adp.realm.de\wlan | 192.168.0.10 | 1 | | 6 | adp.realm.de\wlan | 192.168.0.11 | 1 | ...... +----+---------------------------+----------------+-----------+ 7 rows in set (0.00 sec) ... and it seems to work : [mschap] expand: --require-membership-of=%{Huntgroup-Name} -> --require-membership-of=adp.realm.de\wlan It even doesn't work if i write --require-membership-of="adp.realm.de\wlan" by hand in the mschap module. Mschap says successfull , eap-conversation aborts.... alan buxey <A.L.M.Buxey@lboro.ac.uk> hat am 5. Juli 2012 um 13:38 geschrieben:
Hi,
--require-membership-of="%{Huntgroup-Name}"
?
alan
Patrick Machauer Rechenzentrum Duale Hochschule Baden-Württemberg Mannheim Baden-Wuerttemberg Cooperative State University Mannheim Rechenzentrum Coblitzallee 1-9 68163 Mannheim Tel.: +49 (0)621 4105 - 1278 Fax: +49 (0)621 4105 - 1278 E-Mail: machauer@dhbw-mannheim.de <mailto:machauer@dhbw-mannheim.de> Web: http://www.rz.dhbw-mannheim.de <http://www.rz.dhbw-mannheim.de> [Logo DHBW Mannheim]
Patrick Machauer wrote:
Yes, i get the Groupname out of the DB :
Huntgroup-Name := "%{sql:select groupname from radhuntgroup where nasipaddress=\"%{NAS-IP-Address}\"}"
Don't do that. Huntgroup-Name already has a meaning. It does huntgroup checks from the "huntgroups" file. Create a *new* attribute. See raddb/dictionary for instructions. Alan DeKok.
participants (2)
-
Alan DeKok -
Patrick Machauer