check-eap-tls

[Matthew Newton]

On Wed, Aug 17, 2016 at 04:29:37PM +0200, Thomas Massip wrote:
> I try to use the virtual server 'check-eap-tls', but when I start FreeRadius
> with '-radiusd -XXXX' I have this error :

"radiusd -X" should be all that is needed.

> Wed Aug 17 16:18:39 2016 : Error:
> /opt/fr3/etc/raddb/sites-enabled/check-eap-tls[63]: Parse error in condition
> Wed Aug 17 16:18:39 2016 : Error:
> /opt/fr3/etc/raddb/sites-enabled/check-eap-tls[63]:
> ("host/%{TLS-Client-Cert-Common-Name}" == &User-Name) {
> Wed Aug 17 16:18:39 2016 : Error:
> /opt/fr3/etc/raddb/sites-enabled/check-eap-tls[63]:  ^ Cannot use attribute
> reference on right side of condition

Hmm, the attribute is on the right side of the condition. Try
switching them around.

if (&User-Name == "host/%{TLS-Client-Cert-Common-Name}") {

It's a typo in the default config. I've pushed a fix.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>