How to send empty value via radclient?
Hello, Need to send empty value in attribute via coa request for clear any value in current state of attribute and clear attribute itself: # /bin/echo "Context-Name = local, Qos-Policing-Profile-Name='' , Qos-Metering-Profile-Name='' , Framed-IP-Address = yy.yy.yy.yy" | /usr/local/bin/radclient -x -t 3 -c 1 -r 2 -p 4 xx.xx.xx.xx:3799 coa xxxxxx Sending CoA-Request of id 121 to xx.xx.xx.xx port 3799 Context-Name = "dhcp" Qos-Policing-Profile-Name = "" Qos-Metering-Profile-Name = "" Framed-IP-Address = yy.yy.yy.yy rad_recv: CoA-NAK packet from host xx.xx.xx.xx port 3799, id=121, length=32 Error-Cause = Missing-Attribute Event-Timestamp = "Jun 27 2011 10:48:37 MSD" Missing-Attribute is because NAS doesn't receive two attributes Qos-Policing-Profile-Name and Qos-Metering-Profile-Name because radclient doesn't really send it or filtered it, i.e. NAS only received Context-Name and Framed-IP-Address, is this possible to send empty value? -- Alexander Kubatkin
RFC 2865 Page 24 string 1-253 octets containing binary data (values 0 through 255 decimal, inclusive). Strings of length zero (0) MUST NOT be sent; omit the entire attribute instead. If your NAS requires zero length strings then its breaking the RADIUS protocol standard. -Arran On Jun 27, 2011, at 9:10 AM, Alexander Kubatkin wrote:
Hello,
Need to send empty value in attribute via coa request for clear any value in current state of attribute and clear attribute itself:
# /bin/echo "Context-Name = local, Qos-Policing-Profile-Name='' , Qos-Metering-Profile-Name='' , Framed-IP-Address = yy.yy.yy.yy" | /usr/local/bin/radclient -x -t 3 -c 1 -r 2 -p 4 xx.xx.xx.xx:3799 coa xxxxxx Sending CoA-Request of id 121 to xx.xx.xx.xx port 3799 Context-Name = "dhcp" Qos-Policing-Profile-Name = "" Qos-Metering-Profile-Name = "" Framed-IP-Address = yy.yy.yy.yy rad_recv: CoA-NAK packet from host xx.xx.xx.xx port 3799, id=121, length=32 Error-Cause = Missing-Attribute Event-Timestamp = "Jun 27 2011 10:48:37 MSD"
Missing-Attribute is because NAS doesn't receive two attributes Qos-Policing-Profile-Name and Qos-Metering-Profile-Name because radclient doesn't really send it or filtered it, i.e. NAS only received Context-Name and Framed-IP-Address, is this possible to send empty value?
-- Alexander Kubatkin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
On Jun 27, 2011, at 9:38 AM, Arran Cudbard-Bell wrote:
RFC 2865 Page 24
string 1-253 octets containing binary data (values 0 through 255 decimal, inclusive). Strings of length zero (0) MUST NOT be sent; omit the entire attribute instead.
If your NAS requires zero length strings then its breaking the RADIUS protocol standard.
Couldn't you just create default profiles and assign them instead? -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
27.06.11 11:45, Arran Cudbard-Bell пишет:
On Jun 27, 2011, at 9:38 AM, Arran Cudbard-Bell wrote:
RFC 2865 Page 24
string 1-253 octets containing binary data (values 0 through 255 decimal, inclusive). Strings of length zero (0) MUST NOT be sent; omit the entire attribute instead.
If your NAS requires zero length strings then its breaking the RADIUS protocol standard.
Couldn't you just create default profiles and assign them instead?
This is only exit for now and it was first what has been done. Thanks for your answer. I will try to terror vendor of my box. Just for clarify - this restriction applied to VSA attributes? or only standard? or whole attributes?
-Arran
Arran Cudbard-Bell a.cudbardb@freeradius.org
RADIUS - Half the complexity of Diameter
-- Alexander Kubatkin
On Jun 27, 2011, at 10:34 AM, Alexander Kubatkin wrote:
27.06.11 11:45, Arran Cudbard-Bell пишет:
On Jun 27, 2011, at 9:38 AM, Arran Cudbard-Bell wrote:
RFC 2865 Page 24
string 1-253 octets containing binary data (values 0 through 255 decimal, inclusive). Strings of length zero (0) MUST NOT be sent; omit the entire attribute instead.
If your NAS requires zero length strings then its breaking the RADIUS protocol standard.
Couldn't you just create default profiles and assign them instead?
You could also try sending a null character `printf "\0"`, radclient *should* include an attribute with this value.
This is only exit for now and it was first what has been done. Thanks for your answer. I will try to terror vendor of my box.
Just for clarify - this restriction applied to VSA attributes? or only standard? or whole attributes?
It's any string type attribute, both VSA and standard. -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
participants (2)
-
Alexander Kubatkin -
Arran Cudbard-Bell