Auth by NAS-Identifier using unlang
Joseph Perrin
joseph at lifeonthestreet.org
Mon Aug 5 22:45:40 CEST 2013
Changing the Local-Group into the request still makes control:Local-Group
empty.
abc Cleartext-Password:="xyz", Local-Group:="staff"
NAS Sends this:
User-Name = "abc"
:
NAS-Identifier = "resident"
if ( control:Local-Group != NAS-Identifier ) {
Diagnostic says:
++? if (control:Local-Group != NAS-Identifier ) -> FALSE
("staff" != "resident") should be True, but control:Local-Group is empty.
:-(
On Mon, Aug 5, 2013 at 4:14 PM, Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:
> >
> >
> > Running radiusd -X I get:
> >
> > :
> > ++? if (Local-Group != NAS-Identifier )
> > (Attribute Local-Group was not found)
> > ? Evaluating (Local-Group != NAS-Identifier ) -> FALSE
> > ++? if (Local-Group != NAS-Identifier ) -> FALSE
> > :
> >
> > And it's clear Local-Group is always empty. :-(
>
> Yeah you've inserted it into the reply list, and you're looking for it in
> the request list....
>
> abc Cleartext-Password:="xyz", Local-Group := 'NAS-Identifier'
>
> if (control:Local-Group != 'NAS-Identifier')
>
> -Arran
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS Development Team
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130805/068892ac/attachment-0001.html>
More information about the Freeradius-Users
mailing list