how to get vendor specific attribute value
Hello, I want to retrieve the value of the vsa attribute from the Access-accept response of free radius (I use tiny radius client). I tried to add attribute in the users file like this: testing Cleartext-Password := "toto@titi" ROLE = user But I found unknown attribute sent in the ethereal trace even though I defined it in a customer dictionary. i need your help
Hi but the issue is from free radius response why it send unknown attribute??? is there sometink that lack?? May be I have problem in adding new VSA dictionary file into Freeradius, I hope that you agree to help me solve my problem. Below you can find my dictionary VENDOR Ps 6666 BEGIN-VENDOR Ps ATTRIBUTE ROLE 10 integer ATTRIBUTE PROFIL 11 integer VALUE ROLE User 1 VALUE PROFIL Sec 1 END-VENDOR Ps I included my dictionary in the main dictionary( /usr/local/share/freeradius/) Now Iwant to add a VSA(ROLE for exemple) in the Access-Accept response of freeRadius. I tried to add attribute in the users file like this: testing Cleartext-Password := "toto@titi" ROLE = user But I found unknown attribute sent in the ethereal trace even though I defined it in a customer dictionary. 2010/10/7 Alan DeKok <aland@deployingradius.com>
Noura Kossentini wrote:
Hello, I want to retrieve the value of the vsa attribute from the Access-accept response of free radius (I use tiny radius client).
Ask them how to use their API.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Noura Kossentini wrote:
Hi but the issue is from free radius response why it send unknown attribute??? is there sometink that lack??
Yes. Wireshark doesn't have copies of the dictionary. The dictionaries are required to decode the attribute. This is how FreeRADIUS works.
May be I have problem in adding new VSA dictionary file into Freeradius,
You didn't add it to wireshark.
But I found unknown attribute sent in the ethereal trace even though I defined it in a customer dictionary.
That's how RADIUS works. Alan DeKok.
Hi but why wireshark can see other attributes (like Idle-Timeout, service-type ...) without having dictionary.rfc2865?? 2010/10/8 Alan DeKok <aland@deployingradius.com>
Noura Kossentini wrote:
Hi but the issue is from free radius response why it send unknown attribute??? is there sometink that lack??
Yes. Wireshark doesn't have copies of the dictionary. The dictionaries are required to decode the attribute. This is how FreeRADIUS works.
May be I have problem in adding new VSA dictionary file into Freeradius,
You didn't add it to wireshark.
But I found unknown attribute sent in the ethereal trace even though I defined it in a customer dictionary.
That's how RADIUS works.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Noura Kossentini