sending attributes from sql

Andrew Long fursink at gmail.com
Mon Jan 5 20:56:07 CET 2009


Looking for a little guidance on how to send user specific attributes
to over-ride NAS defaults. NAS is a Colubris MSC-3200. In their public
access guide, Colubris explains how to set a welcome-url for different
groups... ie.

"Add the following entry to the RADIUS profile for the basic cust
welcome-url=web_server_URL/basic/welcome.html
goodbye-url=web_server_URL/basic/goodbye.html

Add the following entry to the RADIUS profile for the premium cust
welcome-url=web_server_URL/premium/welcome.html
goodbye-url=web_server_URL/premium/goodbye.html"

I have:
mysql> select username,attribute,op,value from radreply;
+-----------+--------------------+----+-----------------------------------------------------------------------+
| username  | attribute          | op | value
                                       |
+-----------+--------------------+----+-----------------------------------------------------------------------+
| ewsandbox | Colubris-AVPair    | += |
access-list=loginserver,ACCEPT,tcp,192.168.10.23,all
|
| ewsandbox | Colubris-AVPair    | += | use-access-list=loginserver
                                       |
| ewsandbox | Colubris-AVPair    | += |
login-url=http://192.168.10.23/hotspots/ewsandbox/login.html
|
| ewsandbox | Colubris-AVPair    | += |
session-page=http://192.168.10.23/hotspots/ewsandbox/session.html
|
| ewsandbox | Colubris-AVPair    | += |
fail-page=http://192.168.10.23/hotspots/ewsandbox/fail.html
|
| ewsandbox | Colubris-AVPair    | += |
transport-page=http://192.168.10.23/hotspots/ewsandbox/transport.html
|
| fred      | Service-Type       | =  | Framed-User
                                       |
| fred      | Framed-Protocol    | =  | PPP
                                       |
| fred      | Framed-IP-Address  | =  | 192.168.1.55
                                       |
| fred      | Framed-IP-Netmask  | =  | 255.255.255.0
                                       |
| fred      | Framed-Routing     | =  | Broadcast-Listen
                                       |
| fred      | Framed-Filter-Id   | =  | std.ppp
                                       |
| fred      | Framed-MTU         | =  | 1500
                                       |
| fred      | Framed-Compression | =  | Van-Jacobsen-TCP-IP
                                       |
| fred      | Colubris-AVPair    | += |
welcome-url=http://www.escapewire.com
|
+-----------+--------------------+----+-----------------------------------------------------------------------+

Colubris-AVPair is defined in the supplied dictionary, but I find that
although the attribute is sent...

Sending Access-Accept of id 217 to 192.168.10.30 port 32770
	Service-Type = Framed-User
	Framed-Protocol = PPP
	Framed-IP-Address = 192.168.1.55
	Framed-IP-Netmask = 255.255.255.0
	Framed-Routing = Broadcast-Listen
	Framed-Filter-Id = "std.ppp"
	Framed-MTU = 1500
	Framed-Compression = Van-Jacobson-TCP-IP
	Colubris-AVPair += "welcome-url=http://www.escapewire.com"
	MS-CHAP2-Success =
0xd9533d33434337424430333430374637464633424639433338323739464444364530324237393137333736
	MS-MPPE-Recv-Key = 0xd0ceed0c246d4cf37fd9586a5098b5f4
	MS-MPPE-Send-Key = 0xc7928fb94ffcb4acc06a838dfaa933f7
	MS-MPPE-Encryption-Policy = 0x00000001
	MS-MPPE-Encryption-Types = 0x00000006
Finished request 8.

That the redirection is not working. I also tried with a modified
radreply entry, simply using welcome-url as the attribute and op of :=
(after defining welcome-url in the dictionary), but this does not work
either.

I understand the list is not support for Colubris, but I hope someone
with more experience can tell me how I might be misinterpreting the
instructions.

Thank you.

Andrew Long

FreeRADIUS Ver. 2.1.3
Backend: MySQL



More information about the Freeradius-Users mailing list