Cisco-AVPair and Access-Accept

[Eugene M. Zheganin]

Hi,

On 08.11.2016 18:43, Eugene M. Zheganin wrote:
> Hi.
>
> I'm trying to restrict a wireless user to a specific SSID. I have a
> freeradius 3.0.11 server that was configured some time ago when it was
> running a  2.x version, and this feature was working, then I ported the
> configs. Now it doesn't work for some reason, and I'm desperately trying
> to figure out why. It has an PgSQL backend configured and pretty much
> all of my tweaks are saved there.
>
> So, now about what do I see.
> Seems like when using radtest sequence everything is working as intended:
I was able to create a workaround, by adding in the default server
post-auth section the condition

if(Sql-Group == "public-wifi"){
    update reply{
        Cisco-AVpair += "ssid=vivat"
    }
}

But I still wonder what did I do wrong on the usual way with sql groups.

Thanks.
Eugene.