user specific settings in users file overwritten by DEFAULT settings?
Drew Weaver
drew.weaver at thenap.com
Thu Aug 17 19:30:40 CEST 2006
I have a user specified in my users file like this:
isdn Auth-Type = System
Service-Type = Framed,
Framed-Protocol = MPP,
Framed-Routing = None,
Ascend-Maximum-Time = 18000,
Ascend-Idle-Limit = 900,
Ascend-Assign-IP-Pool = 0,
Ascend-Maximum-Channels = 2,
Fall-Through = "1"
Then at the bottom of the file I have:
DEFAULT Auth-Type = System
Fall-Through = 1
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Framed-MTU = 576,
Service-Type = Framed-User,
Fall-Through = Yes
DEFAULT Framed-Protocol == PPP
Framed-Protocol = PPP,
Framed-Compression = Van-Jacobson-TCP-IP,
Ascend-Maximum-Time = 18000,
Idle-Timeout = 900
When I authenticate as this user, I see:
Thu Aug 17 13:18:26 2006 : Debug: users: Matched isdn at 21
Thu Aug 17 13:18:26 2006 : Debug: users: Matched DEFAULT at 133
Thu Aug 17 13:18:26 2006 : Debug: users: Matched DEFAULT at 135
Thu Aug 17 13:18:26 2006 : Debug: users: Matched DEFAULT at 140
Thu Aug 17 13:18:26 2006 : Debug: modsingle[authorize]: returned from
files (rlm_files) for request 5
Thu Aug 17 13:18:26 2006 : Debug: modcall[authorize]: module "files"
returns ok for request 5
Thu Aug 17 13:18:26 2006 : Debug: modcall: group authorize returns ok
for request 5
Thu Aug 17 13:18:26 2006 : Debug: rad_check_password: Found Auth-Type
System
Thu Aug 17 13:18:26 2006 : Debug: auth: type "System"
Thu Aug 17 13:18:26 2006 : Debug: Processing the authenticate section
of radiusd.conf
Thu Aug 17 13:18:26 2006 : Debug: modcall: entering group authenticate
for request 5
Thu Aug 17 13:18:26 2006 : Debug: modsingle[authenticate]: calling
unix (rlm_unix) for request 5
Thu Aug 17 13:18:26 2006 : Debug: HASH: user isdn found in hashtable
bucket 59493
Thu Aug 17 13:18:26 2006 : Debug: modsingle[authenticate]: returned
from unix (rlm_unix) for request 5
Thu Aug 17 13:18:26 2006 : Debug: modcall[authenticate]: module "unix"
returns ok for request 5
Thu Aug 17 13:18:26 2006 : Debug: modcall: group authenticate returns ok
for request 5
Thu Aug 17 13:18:26 2006 : Auth: Login OK: [isdn/8293] (from client
192.168.0.3 port 1060 cli 6143677963)
Sending Access-Accept of id 2 to 192.168.0.3:7010
Service-Type = Framed-User
Framed-Routing = None
Ascend-Maximum-Time = 18000
Ascend-Idle-Limit = 900
Ascend-Assign-IP-Pool = 0
Ascend-Maximum-Channels = 2
Framed-IP-Address = 255.255.255.254
Framed-MTU = 576
Framed-Protocol = PPP
Framed-Compression = Van-Jacobson-TCP-IP
Idle-Timeout = 900
Can anyone tell me why the radius server is ignoring the isdn entry in
the users file and instead returning the DEFAULT entry?
Thanks,
Andrew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060817/2ae1287a/attachment.html>
More information about the Freeradius-Users
mailing list