User-Name issue and mac based authentication
Fabien COMBERNOUS
fcombernous at kezia.com
Thu Jul 8 14:23:50 CEST 2010
Alan DeKok wrote:
> Fabien COMBERNOUS wrote:
>
>> I'm using Free radius for Mac Address authentication.
>>
>> When a use tcpdump on the radius server, the Radius Request packet
>> contains all the mac Address. But in the "radiusd -X" output, the
>> User-Name is truncated. The last digit is erased and so the device is
>> rejected.
>>
>
> Please *show* the output of tcpdump && "radiusd -X". My guess is that
> you're looking at different fields in tcpdump && "radiusd -X".
>
> i.e. The server accepts all fields as the NAS sends them. It does not
> truncate or delete anything unless you specifically tell it to do that.
>
It is exactly what i thouht.The tcpdump showed that radius use what it
received.
We found the source of the issue. It was the nas (switch). The last
version of its firware was bugged.
Thank you for reading.
Best regards,
--
*Fabien COMBERNOUS*
/unix system engineer/
www.kezia.com <http://www.kezia.com/>
*Tel: +33 (0) 467 992 986*
Kezia Group
More information about the Freeradius-Users
mailing list