Dynamic-Clients

Fajar A. Nugraha list at fajar.net
Wed Mar 28 07:59:42 CEST 2012


On Wed, Mar 28, 2012 at 12:06 PM, dulan <achinthau at gmail.com> wrote:
> first i would like to thanks both of you to reply for this issue.
>
> now i changed Dynamic-Clients file as follows

> # if ( "%{sql: SELECT nasname FROM nas WHERE nasname = '10.10.10.161'}") {
> update control {
>                freeradius-Client-IP-Address = "%{Packet-Src-IP-Address}"
>                freeradius-Client-Secret = "testing123"
>                freeradius-Client-Shortname = ""
>                freeradius-Client-NAS-Type = "other"
>               }
> #}

(sigh)

Did you understand what that change means? Nobody suggested that.

Changing config blindly without knowing what it does is a sure way of
braking your setup. You're basically saying "no matter what IP address
the packet comes from, add it to allowed NAS list with the shared
secret 'testing123'".

>  WARNING: Unprintable characters in the password.        Double-check the
> shared secret on the server and the NAS!

This is a different problem altogether. Again, what part of the
message is nor clear?

-- 
Fajar


More information about the Freeradius-Users mailing list