Bug in CUI generation? Is this a known issue?

[stefan.paetow at diamond.ac.uk]

Hi Alan, 

No, the operator name was 'correct' for our purposes. This is not a live system, we were using 'camford.ac.uk' as the 'visited site' on our test network. In the real world, it would be the correct operator name. :-)

So, if I were to download v2.2.1, would a 32-character hex-string in cui_hash_key work or would it still cause the expand: portion to give me an empty value?

Regards

Stefan


-----Original Message-----
From: freeradius-users-bounces+stefan.paetow=diamond.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+stefan.paetow=diamond.ac.uk at lists.freeradius.org] On Behalf Of A.L.M.Buxey at lboro.ac.uk
Sent: 10 May 2013 11:00
To: FreeRadius users mailing list
Subject: Re: Bug in CUI generation? Is this a known issue?

Hi,

>    rad_recv: Access-Request packet from host 192.168.126.155 port 1814,
>    id=17, length=113
> 
>                    User-Name = "steve at diamond.ac.uk"
> 
>                    User-Password = "testing"
> 
>                    NAS-IP-Address = 127.0.0.1
> 
>                    NAS-Port = 0
> 
>                    Message-Authenticator = 
> 0x80a453196d15a8e68ba13642ba725b24
> 
>                    Proxy-State = 0x30
> 
>                    Operator-Name = "1camford.ac.uk"

this is wrong. please update your config so that you are setting the correct Operator-Name
- you seem to have copied some example document verbatim

CUI policy has been updated quite a bit - the 3.x has more updates...check the latest 2.2.1 code to see what policy looks like.

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail.
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. 
Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.
Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom