error when adding Primary-DNS
Hi team, I am getting below error when I add in my radgroupreply . I am using other parameter like Framed-Pool and its working fine. Anyidea what it could be ? | 5 | testgroup | Primary-DNS | := | xx.xx.xx.xx | (80) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname ='testgroup' ORDER BY id (80) sql: ERROR: Failed to create the pair: Unknown name "Primary-DNS" (80) sql: ERROR: Error parsing user data from database result (80) sql: ERROR: Error retrieving reply pairs for group testgroup Regards, J
On Dec 18, 2017, at 4:14 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
I am getting below error when I add in my radgroupreply . I am using other parameter like Framed-Pool and its working fine. Anyidea what it could be ?
| 5 | testgroup | Primary-DNS | := | xx.xx.xx.xx |
What's a "Primary-DNS" ?
(80) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname ='testgroup' ORDER BY id (80) sql: ERROR: Failed to create the pair: Unknown name "Primary-DNS"
That should be clear. You need to add attributes using well-known names. i.e. names which are in the dictionaries. You can't just invent names and expect them to do what you want. Alan DeKok.
Thanks Alan. Not inventing, I am reading the guide from Juniper website. https://www.juniper.net/documentation/en_US/junos/topics/reference/general/a... Primary-DNS and Secondary-DNS are supported by Junos. do you think I should add into dictionary ? which file is this? I am using *FreeRADIUS Version 3.0.13* On Tue, Dec 19, 2017 at 10:17 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Dec 18, 2017, at 4:14 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
I am getting below error when I add in my radgroupreply . I am using other parameter like Framed-Pool and its working fine. Anyidea what it could be ?
| 5 | testgroup | Primary-DNS | := | xx.xx.xx.xx |
What's a "Primary-DNS" ?
(80) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname ='testgroup' ORDER BY id (80) sql: ERROR: Failed to create the pair: Unknown name "Primary-DNS"
That should be clear.
You need to add attributes using well-known names. i.e. names which are in the dictionaries.
You can't just invent names and expect them to do what you want.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Regards, Jehanzaib
On Dec 18, 2017, at 4:35 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
Not inventing, I am reading the guide from Juniper website. https://www.juniper.net/documentation/en_US/junos/topics/reference/general/a...
Juniper is not the same as FreeRADIUS. The Juniper documentation assumes you're using the Juniper RADIUS server.
Primary-DNS and Secondary-DNS are supported by Junos.
That's nice. FreeRADIUS doesn't use the Juniper names, because most vendors use horrible names, and they conflict with each other.
do you think I should add into dictionary ?
Don't edit the dictionaries. Read the "dictionary.juniper" file. Look for similar names: ATTRIBUTE Juniper-Primary-Dns 31 ipaddr And use those names. Alan DeKok.
Love you Alan. you are becoming my favourite ;) I think /usr/share/freeradius/dictionary.juniper:30:ATTRIBUTE Juniper-Primary-Dns if I use Primary-Dns it will work. let me try it out. On Tue, Dec 19, 2017 at 10:41 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Dec 18, 2017, at 4:35 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
Not inventing, I am reading the guide from Juniper website. https://www.juniper.net/documentation/en_US/junos/ topics/reference/general/aaa-access-message-attributes.html
Juniper is not the same as FreeRADIUS.
The Juniper documentation assumes you're using the Juniper RADIUS server.
Primary-DNS and Secondary-DNS are supported by Junos.
That's nice. FreeRADIUS doesn't use the Juniper names, because most vendors use horrible names, and they conflict with each other.
do you think I should add into dictionary ?
Don't edit the dictionaries.
Read the "dictionary.juniper" file. Look for similar names:
ATTRIBUTE Juniper-Primary-Dns 31 ipaddr
And use those names.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
-- Regards, Jehanzaib
my typo ya I mean Juniper-Primary-Dns coz that's in the dictionary. ya all good rocky! Thank you Alan On Tue, Dec 19, 2017 at 10:44 AM, J E H A N Z A I B < jehanzaib.kiani@gmail.com> wrote:
Love you Alan. you are becoming my favourite ;)
I think /usr/share/freeradius/dictionary.juniper:30:ATTRIBUTE Juniper-Primary-Dns
if I use Primary-Dns it will work. let me try it out.
On Tue, Dec 19, 2017 at 10:41 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Dec 18, 2017, at 4:35 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
Not inventing, I am reading the guide from Juniper website. https://www.juniper.net/documentation/en_US/junos/topics/ reference/general/aaa-access-message-attributes.html
Juniper is not the same as FreeRADIUS.
The Juniper documentation assumes you're using the Juniper RADIUS server.
Primary-DNS and Secondary-DNS are supported by Junos.
That's nice. FreeRADIUS doesn't use the Juniper names, because most vendors use horrible names, and they conflict with each other.
do you think I should add into dictionary ?
Don't edit the dictionaries.
Read the "dictionary.juniper" file. Look for similar names:
ATTRIBUTE Juniper-Primary-Dns 31 ipaddr
And use those names.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list /users.html
-- Regards, Jehanzaib
-- Regards, Jehanzaib
Alan DeKok <aland@deployingradius.com> writes:
On Dec 18, 2017, at 4:35 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
Not inventing, I am reading the guide from Juniper website. https://www.juniper.net/documentation/en_US/junos/topics/reference/general/a...
Juniper is not the same as FreeRADIUS.
The Juniper documentation assumes you're using the Juniper RADIUS server.
Primary-DNS and Secondary-DNS are supported by Junos.
That's nice. FreeRADIUS doesn't use the Juniper names, because most vendors use horrible names, and they conflict with each other.
do you think I should add into dictionary ?
Don't edit the dictionaries.
Read the "dictionary.juniper" file. Look for similar names:
ATTRIBUTE Juniper-Primary-Dns 31 ipaddr
And use those names.
Note that this can be a bit more complicated with Juniper for hysterical raisins. They use two different vendor IDs and dictionaries on JUNOS, depending on which RADIUS service you're talking about. The docs above refer to "AAA for Subscriber Management". That code is inherited from the ERX platform and is still using the ERX VSAs with vendor ID 4874. So you need to look in the "dictionary.erx" file for those attributes: ATTRIBUTE ERX-Primary-Dns 4 ipaddr This code originated from Unisphere. And at some point Juniper decided to stick to the 'Unisphere' prefix for the 4874 based attributes (not consistently though - they use 'Jnpr' for a few attributes). In an attempt to remove some of the confusion, FreeRADIUS syncronized with the Juniper default names when preparing for v4.x. So when upgrading from v3.0 you will have to look in "dictionary.unisphere" instead of "dictionary.erx". And the primary DNS attribute is then named ATTRIBUTE Unisphere-Primary-Dns 4 ipaddr Confused now? You've seen nothing yet :-) This has little to do with FreeRADIUS of course, as Alan already pointed out. It's mostly a Juniper thing. You should really use the Juniper support you most likely are paying for instead of trusting a random bunch of community bozos. Bjørn
A direct insult ! If you consider yourself a bozo, that does mean we accept devaluing of ourselves. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+m_zouhairy=skno.by@lists.freeradius.org] On Behalf Of Bjorn Mork Sent: Tuesday, December 19, 2017 12:44 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: error when adding Primary-DNS Alan DeKok <aland@deployingradius.com> writes:
On Dec 18, 2017, at 4:35 PM, J E H A N Z A I B <jehanzaib.kiani@gmail.com> wrote:
Not inventing, I am reading the guide from Juniper website. https://www.juniper.net/documentation/en_US/junos/topics/reference/ge neral/aaa-access-message-attributes.html
Juniper is not the same as FreeRADIUS.
The Juniper documentation assumes you're using the Juniper RADIUS server.
Primary-DNS and Secondary-DNS are supported by Junos.
That's nice. FreeRADIUS doesn't use the Juniper names, because most vendors use horrible names, and they conflict with each other.
do you think I should add into dictionary ?
Don't edit the dictionaries.
Read the "dictionary.juniper" file. Look for similar names:
ATTRIBUTE Juniper-Primary-Dns 31 ipaddr
And use those names.
Note that this can be a bit more complicated with Juniper for hysterical raisins. They use two different vendor IDs and dictionaries on JUNOS, depending on which RADIUS service you're talking about. The docs above refer to "AAA for Subscriber Management". That code is inherited from the ERX platform and is still using the ERX VSAs with vendor ID 4874. So you need to look in the "dictionary.erx" file for those attributes: ATTRIBUTE ERX-Primary-Dns 4 ipaddr This code originated from Unisphere. And at some point Juniper decided to stick to the 'Unisphere' prefix for the 4874 based attributes (not consistently though - they use 'Jnpr' for a few attributes). In an attempt to remove some of the confusion, FreeRADIUS syncronized with the Juniper default names when preparing for v4.x. So when upgrading from v3.0 you will have to look in "dictionary.unisphere" instead of "dictionary.erx". And the primary DNS attribute is then named ATTRIBUTE Unisphere-Primary-Dns 4 ipaddr Confused now? You've seen nothing yet :-) This has little to do with FreeRADIUS of course, as Alan already pointed out. It's mostly a Juniper thing. You should really use the Juniper support you most likely are paying for instead of trusting a random bunch of community bozos. Bjørn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Bjørn Mork -
J E H A N Z A I B -
Vacheslav