problem with radtest + dictionary + Authen::Radius (perl)
Hello, I'm working with Freeradius 2.1.8 and I have created my vendor dictionary. I need to use Authen::Radius (perl). This package needs 'vendor' declaration in every 'ATTRIBUTE' line in vendor dictionaries. Following man RADIUS dictionary file http://freeradius.org/radiusd/man/dictionary.html *ATTRIBUTE name number type [vendor|options]* that is possible. But when I use radtest, I have this problem: $ radtest user@realm pass radius 0 claveClient radclient: dict_init: /usr/share/freeradius/dictionary.XXX: unknown option "XXX" Thank you and sorry for my english ____________________ Ana Gallardo Gómez ____________________
Ana Gallardo wrote:
$ radtest user@realm pass radius 0 claveClient radclient: dict_init: /usr/share/freeradius/dictionary.XXX: unknown option "XXX"
You didn't define "XXX" as a vendor. And there's no reason to keep the vendor name a secret. The name/number for the vendor is available in public registries. Alan DeKok.
Hello Alan,
$ radtest user@realm pass radius 0 claveClient
radclient: dict_init: /usr/share/freeradius/dictionary.XXX: unknown option "XXX"
You didn't define "XXX" as a vendor.
I think I did... $ cat /usr/share/freeradius/dictionary.rinuex # -*- text -*- # # dictionary.rinuex # # # Mayo de 2010 # Marco Jaraíz <mjaraiz@unex.es> # Ana Gallardo <aigallardo@unex.es> # VENDOR Rinuex 35782 BEGIN-VENDOR Rinuex # Código para indicar la causa del Access-Reject ATTRIBUTE Codigo-Reject 8 integer VALUE Codigo-Reject Credenciales-Erroneas 3 VALUE Codigo-Reject Cuenta-Bloqueada-Intentos-Reject 4 VALUE Codigo-Reject Imposible-Contactar-Backend 5 VALUE Codigo-Reject Error-Dominio 6 VALUE Codigo-Reject Cuenta-Expirada 7 VALUE Codigo-Reject Cuenta-Inactiva 8 VALUE Codigo-Reject Radius-OK 9 END-VENDOR Rinuex
And there's no reason to keep the vendor name a secret. The name/number for the vendor is available in public registries.
it's truth
Alan DeKok.
Thanks again -- ____________________ Ana Gallardo Gómez ____________________
Ana Gallardo wrote:
Hello Alan,
> $ radtest user@realm pass radius 0 claveClient > radclient: dict_init: /usr/share/freeradius/dictionary.XXX: unknown > option "XXX"
You didn't define "XXX" as a vendor.
I think I did...
$ cat /usr/share/freeradius/dictionary.rinuex
Which doesn't match the error message you showed above. here is *no* ATTRIBUTE line having an option. Please be *consistent*. Alan DeKok.
Which doesn't match the error message you showed above. here is *no* ATTRIBUTE line having an option.
I'm sorry, I paste my actual dictionary... $ cat /usr/share/freeradius/dictionary.rinuex # -*- text -*- # # dictionary.rinuex # # # Mayo de 2010 # Marco Jaraíz <mjaraiz@unex.es> # Ana Gallardo <aigallardo@unex.es> # VENDOR Rinuex 35782 BEGIN-VENDOR Rinuex # Código para indicar la causa del Access-Reject ATTRIBUTE Codigo-Reject 8 integer Rinuex VALUE Codigo-Reject Credenciales-Erroneas 3 VALUE Codigo-Reject Cuenta-Bloqueada-Intentos-Reject 4 VALUE Codigo-Reject Imposible-Contactar-Backend 5 VALUE Codigo-Reject Error-Dominio 6 VALUE Codigo-Reject Cuenta-Expirada 7 VALUE Codigo-Reject Cuenta-Inactiva 8 VALUE Codigo-Reject Radius-OK 9 END-VENDOR Rinuex
Please be *consistent*.
OK, sorry and thanks for your time. Ana ____________________ Ana Gallardo Gómez ____________________
Ana Gallardo wrote:
I'm sorry, I paste my actual dictionary...
$ cat /usr/share/freeradius/dictionary.rinuex ... BEGIN-VENDOR Rinuex
Which says "all of the following attributes are for this vendor"
# Código para indicar la causa del Access-Reject ATTRIBUTE Codigo-Reject 8 integer Rinuex
Which *duplicates* the vendor name. Do one of the following: a) delete the vendor name from the ATTRIBUTE line b) delete the BEGIN/END-VENDOR lines Alan DeKok.
$ cat /usr/share/freeradius/dictionary.rinuex ... BEGIN-VENDOR Rinuex
Which says "all of the following attributes are for this vendor"
OK
# Código para indicar la causa del Access-Reject ATTRIBUTE Codigo-Reject 8 integer Rinuex
Which *duplicates* the vendor name. Do one of the following:
a) delete the vendor name from the ATTRIBUTE line
b) delete the BEGIN/END-VENDOR lines
I choose to delete the BEGIN/END-VENDOR lines for compatibility with Authen::Radius perl package. Thank you very much. Everything it's ok now. -- ____________________ Ana Gallardo Gómez ____________________
participants (2)
-
Alan DeKok -
Ana Gallardo