EAP/TTLS : Issue while trying to proxy inner request and to use post proxy filter
Hello, Sorry to post again for the same subject, but I guess I haven't been very clear in my last question to the list, so I'm trying to ask it differently. I've done some drawing that illustrate the settings I've tried and also provide the whole log, that could be seen here http://www.brozs.net/wimax/wimax-freeradius.png In Setup 1 (one radius with local authentication) everything is fine http://www.brozs.net/wimax/wimax.log In setup 2 (inner request proxy to ISP radius that will answer with Wimax Attribute) -> In that case Wholesale Radius will discard Wimax attributes contains in the access accept from the ISP radius during the proxification, so that the access accept does not have all the wanted access acccept. I'm trying to understand why. http://www.brozs.net/wimax/wimax-proxy1.log In setup 3 (which is the solution I would like to use, ie inner request proxy to ISP radius, and Wimax attributes are being added after receiving the access accept from ISP Radius) -> In that case Wholesale Radius will add some of the wanted attribute but not all the one that are in attrs I'm also trying to know why. http://www.brozs.net/wimax/wimax-proxy2.log Regards Thomas
In Setup 1 (one radius with local authentication) everything is fine
http://www.brozs.net/wimax/wimax.log
In setup 2 (inner request proxy to ISP radius that will answer with Wimax Attribute)
I'm trying to understand why.
Compare attrs entries with users file entries. Then read what do operators := and += do. Ivan Kalik Kalik Informatiika ISP
Compare attrs entries with users file entries. Then read what do operators := and += do.
I've read man unlang and I correct my configuration, and I finally succeed to do what I want but not as I thought. I just notice the following : In users file you can do Attribute_A = foo Attribute_A += bar But I haven't found a way to do it in attrs file (syntax is ok, but the reply won't include both same attribute). I've tried Attribute_A = foo Attribute_A += bar and Attribute_A: = foo Attribute_A += bar without success. Finally I've used unlang in post-auth module to add the wanted attributes like that post-auth { main_pool update reply { WiMAX-QoS-Id += 2 WiMAX-Schedule-Type += 2 WiMAX-Traffic-Priority += 0 WiMAX-Maximum-Sustained-Traffic-Rate += 1024000 WiMAX-Media-Flow-Type += 2 } reply_log # sql # sql_log exec Post-Auth-Type REJECT { attr_filter.access_reject } Any way to make things work is ok, just wanted to know if that one is "dirty" ? Thanx again for your advise. Thomas
Compare attrs entries with users file entries. Then read what do operators := and += do.
I've read man unlang and I correct my configuration, and I finally succeed to do what I want but not as I thought. I just notice the following : In users file you can do Attribute_A = foo Attribute_A += bar But I haven't found a way to do it in attrs file (syntax is ok, but the reply won't include both same attribute). So use users file: DEFAULT Realm == whatever list WiMAX attributes as reply; just like you did for single user Ivan Kalik Kalik Informatika ISP
On Thu, 9 Apr 2009 07:37:38 +0100, "Ivan Kalik" <tnt@kalik.net> wrote:
Compare attrs entries with users file entries. Then read what do operators := and += do.
I've read man unlang and I correct my configuration, and I finally succeed to do what I want but not as I thought.
I just notice the following : In users file you can do
Attribute_A = foo Attribute_A += bar
But I haven't found a way to do it in attrs file (syntax is ok, but the reply won't include both same attribute).
So use users file:
DEFAULT Realm == whatever list WiMAX attributes as reply; just like you did for single user
I didn't know you could use files module on proxy radius, where should I add the files module, in post-auth, post-proxy ? Thomas
participants (3)
-
Ivan Kalik -
Thomas Fagart -
tnt＠kalik.net