using unlang to rewrite framed-ip-address sent from LDAP
hello, i am trying to rewrite the framed-ip-address information that are given to radius via ldap to a null value currently many of our users have a fixed framed-ip-address value of 255.255.255.254 , since we will now be using radius and mysql to distribute IP i would like to change this value to nothing upon connection. i have tried this but was unsuccessful post-auth { reply_log sql-accounting exec Post-Auth-Type REJECT { attr_filter.access_reject } if (Framed-IP-Address =="255.255.255.254") { update control { Framed-IP-Address :="%{1.1.1.1}" } } sqlippool } debug tells me: ++? if (Framed-IP-Address =="255.255.255.254") (Attribute Framed-IP-Address was not found) ? Evaluating (Framed-IP-Address =="255.255.255.254") -> FALSE ++? if (Framed-IP-Address =="255.255.255.254") -> FALSE so of course i am wrong somewhere and i wondering if some of you guys could give me input or help or directions :) thanks seb.
Hi,
i am trying to rewrite the framed-ip-address information that are given to radius via ldap to a null value
okay. but the unlang you showed us would have rewritten the control packet to have Framed-IP-Address of "%{1.1.1.1}" - which is wrong/invalid anyway. what does the rest of the debug log look like where you see this value that you want to change. how about using attribute filter module (using attrs file) to just wipe it out? alan
errr yes that was me trying to replace it with any value sorry it should not have been pasted in this example ! the attribute filter module is a TERRIFIC idea and i will use this instead ! many thanks ! On Tue, May 7, 2013 at 5:48 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
i am trying to rewrite the framed-ip-address information that are given to radius via ldap to a null value
okay. but the unlang you showed us would have rewritten the control packet to have Framed-IP-Address of "%{1.1.1.1}" - which is wrong/invalid anyway.
what does the rest of the debug log look like where you see this value that you want to change. how about using attribute filter module (using attrs file) to just wipe it out?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
sebastien boucher -
Sebastien Boucher