Match two attributes with the same name

Alan DeKok aland at
Thu Sep 17 10:31:27 CEST 2009

Amr el-Saeed wrote:
> I am using freeradius 1.1.7

  Ugh.  Upgrade.

> i want to check an attribute come in the Access request ,named
> Cisco-AVPair , i could do this successfully using chkval
> i put Cisco-AVPair as a generic check item in the LDAP and is working fine.
> the problem is that this is the coming request attributes
>        Cisco-AVPair = "client-mac-address=000000000000"
>        Cisco-AVPair = "circuit-id-tag= 1/1/06/09:0.35"
> So, the radius always apply the comparison with the first Cisco-AVPair 
> which is Cisco-AVPair = "client-mac-address=000000000000"
> if it is correct returns OK and if not returns reject regardless the
> second one
> Actually i don't to do a comparison against the first one, my target is
> the second but the router sends both in that order .
> How can i match both attributes even if they have the same name ??

  If you're doing checkval in ldap... you can't.

  Alan DeKok.

More information about the Freeradius-Users mailing list