I added: authorize { ... Autz-Type DEVICES { devices } ... } to sites-available/default and everything now works, MAC authentication from one device and 802.1x from other. The configuration is complex to say the least but works great! Kent Kent L. Nasveschuk Systems Administrator ---------------------------- Marine Biological Laboratory 7 MBL St. Woods Hole, MA 02543 ----- Original Message ----- From: tnt@kalik.net To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, December 22, 2008 4:28:55 PM GMT -05:00 US/Canada Eastern Subject: Re: Unknown value specified for Autz-Type, freeradius 2.1.3

Having a little problem with "Unknown value specified for Autz-Type". OS CentOS 5 Freeradius version 2.1.3 latest I have this working on a 1.1.3 version that ships with CentOS 5 but having a little problem here.

..

raddb/sites-enabled/inner-tunnel: .. .. Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.15 port 49152, id=62, length=146 User-Name = "00-11-24-80-40-7A" Service-Type = Framed-User Called-Station-Id = "00-01-F4-5C-97-80" Calling-Station-Id = "00-11-24-80-40-7A" NAS-IP-Address = 192.168.1.15 NAS-Port = 17 NAS-Port-Type = Ethernet NAS-Port-Id = "ge.1.17" User-Password = "xxxxxxx" Message-Authenticator = 0x21da3669c869a962c6270f0cee3d3bac +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "00-11-24-80-40-7A", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound [files] expand: %{Client-IP-Address} -> 192.168.1.15 [files] expand: %{Client-IP-Address} -> 192.168.1.15 [files] users: Matched entry DEFAULT at line 5 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Using Autz-Type DEVICES WARNING: Unknown value specified for Autz-Type. Cannot perform requested action.

This is default virtual server now. Add the additional types to it as well. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html