Duplicating results for radtest
I have a Centos 5.3 server running the latest version of FreeRadius. I have 15 routers that need to be authenticated on an ADSL network. I am experiencing duplicate results for a radtest on my Freeradius server. I need to send multiple Cisco-AVPair values for a user login. I read on the Wiki that I should use the += operator to do this. The RadReply table is as follows: id Username Attribute Op Value 1 test@test.net Framed-Protocol := PPP 2 test@test.net Framed-IP-Netmask := 255.255.255.0 3 test@test.net Framed-IP-Address := 176.25.165.1 4 test@test.net Cisco-AVPair := ip:route=176.25.165.0 255.255.255.0 176.25.165.1 5 test@test.net Cisco-AVPair += ip:route=0.0.0.0 0.0.0.0 #.#.#.# 6 test@test.net Cisco-AVPair += ip:dns-servers=#.#.#.# #.#.#.# The results get back are Framed-Protocol = PPP Framed-IP-Netmask = 255.255.255.0 Framed-IP-Address = 176.25.165.1 Cisco-AVPair = ip:route=176.25.165.0 255.255.255.0 176.25.165.1 Cisco-AVPair = ip:route=0.0.0.0 0.0.0.0 #.#.#.# Cisco-AVPair = ip:dns-servers=#.#.#.# #.#.#.# Cisco-AVPair = ip:route=0.0.0.0 0.0.0.0 #.#.#.# Cisco-AVPair = ip:dns-servers=#.#.#.# #.#.#.# As you can see, the last two Cisco-AVPair lines, that have the attribute of '+=', appear twice in the returned values. If I change the operator to anything else e.g. ':=' or '=' I don't get a reply for them at all when doing a radtest. Does anyone know why this is happening and does it matter that it is happening? Mark Smith Systems Engineer Abel Alarm Co Ltd
Please see attached radiusd -X dump file as requested. Mark Smith Systems Engineer -----Original Message----- From: Alan Buxey [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: 27 January 2010 14:39 To: mark.smith@abelalarm.co.uk; FreeRadius users mailing list Subject: Re: Duplicating results for radtest radiusd -X then we can see what/where things are happening alan
--On Wednesday, January 27, 2010 05:11:26 PM +0000 Mark Smith <mark.smith@abelalarm.co.uk> wrote:
Please see attached radiusd -X dump file as requested.
Mark Smith Systems Engineer
-----Original Message----- From: Alan Buxey [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: 27 January 2010 14:39 To: mark.smith@abelalarm.co.uk; FreeRadius users mailing list Subject: Re: Duplicating results for radtest
radiusd -X
then we can see what/where things are happening
Hi Mark, Your -X doesn't seem to include an auth request... Could you send one that does? If you watch the -X during the auth request, you should be able to see when and why any attributes are added. -James
Hello Alan, Attached is a dump file with auth requests included. Mark Smith Systems Engineer Abel Alarm Co Ltd 4 Vaughan Way Leicester LE1 4ST web: www.abelalarm.co.uk email: mark.smith@abelalarm.co.uk -----Original Message----- From: freeradius-users-bounces+mark.smith=abelalarm.co.uk@lists.freeradius.org [mailto:freeradius-users-bounces+mark.smith=abelalarm.co.uk@lists.freeradius .org] On Behalf Of James J J Hooper Sent: 27 January 2010 17:20 To: FreeRadius users mailing list Subject: RE: Duplicating results for radtest --On Wednesday, January 27, 2010 05:11:26 PM +0000 Mark Smith <mark.smith@abelalarm.co.uk> wrote:
Please see attached radiusd -X dump file as requested.
Mark Smith Systems Engineer
-----Original Message----- From: Alan Buxey [mailto:A.L.M.Buxey@lboro.ac.uk] Sent: 27 January 2010 14:39 To: mark.smith@abelalarm.co.uk; FreeRadius users mailing list Subject: Re: Duplicating results for radtest
radiusd -X
then we can see what/where things are happening
Hi Mark, Your -X doesn't seem to include an auth request... Could you send one that does? If you watch the -X during the auth request, you should be able to see when and why any attributes are added. -James - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Mark Smith" <mark.smith@abelalarm.co.uk> writes:
I have a Centos 5.3 server running the latest version of FreeRadius.
"latest" as in the latest included with Centos? If so, then upgrade.
As you can see, the last two Cisco-AVPair lines, that have the attribute of '+=', appear twice in the returned values. If I change the operator to anything else e.g. ':=' or '=' I don't get a reply for them at all when doing a radtest.
Does anyone know why this is happening and does it matter that it is happening?
I used to see this with FR 1.x. It doesn't really matter. But the problem is gone in newer versions, along with a number of much more important fixes and improvments. Bjørn
participants (4)
-
Alan Buxey -
Bjørn Mork -
James J J Hooper -
Mark Smith