Cisco-AVPair and Access-Accept

Eugene M. Zheganin emz at
Tue Nov 8 19:09:17 CET 2016


On 08.11.2016 18:43, Eugene M. Zheganin wrote:
> Hi.
> I'm trying to restrict a wireless user to a specific SSID. I have a
> freeradius 3.0.11 server that was configured some time ago when it was
> running a  2.x version, and this feature was working, then I ported the
> configs. Now it doesn't work for some reason, and I'm desperately trying
> to figure out why. It has an PgSQL backend configured and pretty much
> all of my tweaks are saved there.
> So, now about what do I see.
> Seems like when using radtest sequence everything is working as intended:
I was able to create a workaround, by adding in the default server
post-auth section the condition

if(Sql-Group == "public-wifi"){
    update reply{
        Cisco-AVpair += "ssid=vivat"

But I still wonder what did I do wrong on the usual way with sql groups.


More information about the Freeradius-Users mailing list