VSA in Local User Profile
A. K.
ak21201 at gmail.com
Fri Sep 15 21:52:53 CEST 2006
Although it appears as Account-Info in dictionary.cisco, in the users file
it has to be Cisco-Account-Info (some sort or automatic prepending occurs
based on Vendor ID), so actually i was entering in the new VSA incorrectly.
Changing it to Cisco-Account-Info creates a different problem. Only the
first VSA of that name gets sent back in the Access-Accept response. Is this
behavior configurable?
On 9/15/06, Kevin Bonner <keb at pa.net> wrote:
>
> On Friday 15 September 2006 14:39, A. K. wrote:
> > User profile is as follows:
> >
> > "test" Auth-Type := Local, User-Password == "test"
> > Idle-Timeout = 300,
> > Session-Timeout = 1560,
> > Acct-Interim-Interval = 600,
> > Account-Info = "QU;8000;4000;D;8000;4000",
> > Reply-Message = Authenticated,
> > Cisco-Account-Info = Axxx
> >
> > All attributes are returned in the Access-Accept message except for:
> >
> > Account-Info = "QU;8000;4000;D;8000;4000"
> >
> > Am I violating some sort of syntax restriction?
>
> $ grep Account-Info share/dictionary*
>
> share/dictionary.cisco:ATTRIBUTE Cisco-Account-Info 250 string
>
> In the default dictionary files, I see no Account-Info attribute. Did you
> add
> this to your local dictionary file? When you run freeradius in debug
> mode,
> do you see an error when it encounters that line?
>
> Kevin Bonner
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060915/a56b1fe7/attachment.html>
More information about the Freeradius-Users
mailing list