Auth by NAS-Identifier using unlang

Joseph Perrin joseph at lifeonthestreet.org
Mon Aug 5 22:45:40 CEST 2013


Changing the Local-Group into the request still makes control:Local-Group
empty.

abc                  Cleartext-Password:="xyz", Local-Group:="staff"

NAS Sends this:

User-Name = "abc"
:
NAS-Identifier = "resident"


if ( control:Local-Group != NAS-Identifier ) {

Diagnostic says:
  ++? if (control:Local-Group != NAS-Identifier ) -> FALSE


("staff" != "resident") should be True, but control:Local-Group is empty.
 :-(



On Mon, Aug 5, 2013 at 4:14 PM, Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:

> >
> >
> > Running radiusd -X I get:
> >
> > :
> > ++? if (Local-Group != NAS-Identifier )
> >     (Attribute Local-Group was not found)
> > ? Evaluating (Local-Group != NAS-Identifier ) -> FALSE
> > ++? if (Local-Group != NAS-Identifier ) -> FALSE
> > :
> >
> > And it's clear Local-Group is always empty.  :-(
>
> Yeah you've inserted it into the reply list, and you're looking for it in
> the request list....
>
> abc     Cleartext-Password:="xyz", Local-Group := 'NAS-Identifier'
>
> if (control:Local-Group != 'NAS-Identifier')
>
> -Arran
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS Development Team
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130805/068892ac/attachment-0001.html>


More information about the Freeradius-Users mailing list