external script doesn't add the attributes it prints out

Stun Box stunbox at gmail.com
Fri May 22 18:44:12 CEST 2009


Hi all,


I have installed freeradius 2.14 on Freebsd using the ports.
I need to use an external script, so in radiusd.conf I created in the
module section :
      exec GETVLAN {
                wait = yes
                program = "/usr/local/etc/raddb/getVlan %{User-Name}"
                input-pairs = request
                output-pairs = reply
        }


and I use it in the post-auth section of the inner-tunnel. (I 'm using
peap/mschapv2)

But the result is not what I expected...
I do "echo" for assigning vlan id but the attributes are not appended
to the reply.
Here is a cut of the debug debug :



...
[GETVLAN]       expand: %{User-Name} -> nobody
Exec-Program output: Tunnel-Medium-Type = 6, Tunnel-Type = 13,
Tunnel-Private-Group-Id = 1
Exec-Program-Wait: value-pairs: Tunnel-Medium-Type = 6, Tunnel-Type =
13, Tunnel-Private-Group-Id = 1
Exec-Program: returned: 3
++[GETVLAN] returns ok
} # server inner-tunnel
[peap] Got tunneled reply code 2
        EAP-Message = 0x03080004
        Message-Authenticator = 0x00000000000000000000000000000000
        User-Name = "nobody"
[peap] Got tunneled reply RADIUS code 2
        EAP-Message = 0x03080004
        Message-Authenticator = 0x00000000000000000000000000000000
        User-Name = "nobody"
[peap] Tunneled authentication was successful.
[peap] SUCCESS
++[eap] returns handled
Sending Access-Challenge of id 8 to 192.168.3.125 port 48956
        EAP-Message =
0x0109002b190017030100206a5e995dedc28425eadd6f6b92faa22efdc1a93ab3a26a000df6f49744b8b392
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x1f8b9f59174286e5556aa2fa4357052a
Finished request 8.
Going to the next request
....



Regards,

G.



More information about the Freeradius-Users mailing list