Escaping things

Stun Box stunbox at gmail.com
Fri Aug 14 17:35:32 CEST 2009


Hello everybody,

I'm doing some tests with wpa_supplicant(freebsd) + aironet 1252 +
freeradius2.1.6 (freebsd portage). And I have a mystery I can not
explain.

I test 2 user with a domain. This is my configuration files for
wpa_supplicant. They have just their first user letter mismatching.

USER_TEST
==========
network={
    ssid="test_wifi"
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="DOMAIN\test"
    password="test"
}

USER_NEST
==========
network={
    ssid="test_wifi"
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="DOMAIN\nest"
    password="test"
}


And this is the access and accounting request for both of them :

USER_TEST ACCESS-REQ
=====================
rad_recv: Access-Request packet from host 192.168.9.30 port 1645,
id=232, length=231
        User-Name = "DOMAIN\\test"
        Framed-MTU = 1400
...

USER_TEST ACCOUNT-REQ
======================
rad_recv: Accounting-Request packet from host 192.168.9.30 port 1646,
id=144, length=229
        Acct-Session-Id = "000002F0"
        Called-Station-Id = "00-24-97-B6-86-40"
        Calling-Station-Id = "00-19-5B-35-D0-96"
        Cisco-AVPair = "ssid=test_wifi"
        Cisco-AVPair = "vlan-id=568"
        Cisco-AVPair = "nas-location=unspecified"
        User-Name = "DOMAIN\\test"
...

USER_NEST ACCESS-REQ
=====================
rad_recv: Access-Request packet from host 192.168.9.30 port 1645,
id=222, length=231
        User-Name = "DOMAIN\\nest"
        Framed-MTU = 1400
...

USER_NEST ACCOUNT-REQ
======================
rad_recv: Accounting-Request packet from host 192.168.9.30 port 1646,
id=146, length=233
        Acct-Session-Id = "000002F2"
        Called-Station-Id = "00-24-97-B6-86-40"
        Calling-Station-Id = "00-19-5B-35-D0-96"
        Cisco-AVPair = "ssid=test_wifi"
        Cisco-AVPair = "vlan-id=14"
        Cisco-AVPair = "nas-location=unspecified"
        User-Name = "DOMAIN\nest"
...




The mystery is why there is two backslash for each "User-Name"
excepted in the accounting request ? (I ask, because it does the mess
in my sql base for accounting).


Thanks for reading,

G.



More information about the Freeradius-Users mailing list