determining conditions to differentiate message? types

Alan DeKok aland at
Mon May 30 20:04:55 CEST 2016

On May 30, 2016, at 1:28 PM, Brendan Kearney <bpk678 at> wrote:
> did both of those already, and still have the same questions...  i need to know how to better read the data i have.

  See "man unlang".  It describes how the policies work.

  See raddb/sites-available/default.  It gives many examples of policies.

  When you read raddb/sites-available/default and run the server in debugging mode, you'll see that the debug output follows the contents of the "default" virtual server.

  It also prints out which RADIUS attributes it receives, and the values of those attributes.

  Your job is to read the debug output for the MAC auth and non-MAC auth cases.  Compare them.  See what is different in the two RADIUS packets.

  Then, write unlang rules to look for those differences, and give them different policies.

  This *is* programming.  If you're not comfortable with programming, it won't end well.

  And post summaries of the debug logs to the list.  Ask good questions.  it helps.

  Alan DeKok.

More information about the Freeradius-Users mailing list