Multiple Replay-Message attributes in the ACCESS-ACCEPT message

Michael Alexeev michael.alexeev at gmail.com
Fri Jul 13 04:42:47 CEST 2007


Hi all,

The script which is invoked by Exec-Program-Wait attribute produces
the output similar to the following:

Reply-Message=c5|c3|c14|, Reply-Message=ci5|c14|, Reply-Message=done

So I expect to see three Replay-Message attributes in the
ACCESS-ACCEPT message. According to the FreeRadius docs multiple
Replay-Message are allowed. But for some reason the response contains
only one (the first) attribute. Here is the RADIUS output:

Login OK: [jsullivan/<no User-Password attribute>] (from client
localhost port 0)
 Exec-Program-Wait: value-pairs: Reply-Message=c5|c3|c14|,
Reply-Message=ci5|c14|, Reply-Message=done
Exec-Program: returned: 0
Login OK: [jsullivan/<no User-Password attribute>] (from client
localhost port 0 cli 00-00-39-75-F8-39)
Sending Access-Accept of id 30 to 127.0.0.1 port 2396
        MS-MPPE-Recv-Key =
0x516de53a5daa0328a4eef843b1b708b9fae38fd499bea816abe3c9627423031b
        MS-MPPE-Send-Key =
0x8bbb3efff8abed1c71fb3e9ddd97503b8c9da2725a6e8061b8d2551a2b4ee9bf
        EAP-Message = 0x03110004
        Message-Authenticator = 0x00000000000000000000000000000000
        User-Name = "jsullivan"
        Reply-Message = "c5|c3|c14|"

Any ideas what is going on?

Thanks,
Mike



More information about the Freeradius-Users mailing list