Reply attribute in access-accept while doing eap-mschapv2

free.aaa free.aaa at gmail.com
Fri May 23 07:51:55 CEST 2014


Thanks! It works!

But anyway It would be nice if someone clarify why standard radreply 
attributes did not work with eap stuff.



23.05.2014 5:11, * ?????:
>
> This is my work around.
>
> Try this
> in post-auth
>
> update reply {
>
>                 Class = "%{sql:SELECT `value` FROM `radreply` WHERE 
> `username`='%{User-Name}' and `attribute`='Class';}"
>
>         }
>
> I tried enabling use_tunnled_reply=yes. But no reply is sent through 
> access accept.
>
> On 23/05/2014 2:10 AM, "free.aaa" <free.aaa at gmail.com 
> <mailto:free.aaa at gmail.com>> wrote:
>
>     Hi all!
>
>     It seems like a missed some basic concepts about eap in
>     freeradius. How to make freeradius return attribute for a specific
>     user?
>
>     I'm using freeradius-3.0.3.
>
>     I created user in mysql (radcheck) as usual:
>     test Cleartext-Password := test
>
>     And add to radreply table:
>     test Class = temp_class
>
>     And when I do eap-mschapv2 I did not receive Class attribute.
>
>     I need help to clarify this concept and advice how to include this
>     attribute in the reply.
>
>     PS: As one try I added to my default config in the post-auth
>     section the following:
>
>     update reply {
>            Class = "%{Class}"
>     }
>
>     and after that the Class attribute appeared in the access-accept
>     but it was empty.
>
>     Thanks in advance!
>     Best regards,
>     Alex
>
>     -
>     List info/subscribe/unsubscribe? See
>     http://www.freeradius.org/list/users.html
>
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140523/5ee2bb2d/attachment.html>


More information about the Freeradius-Users mailing list