passwd and unlang
macservo
macservo at googlemail.com
Fri Feb 10 18:22:42 CET 2017
Am I missing something here or have there been changes to the behavior
of passwd and unlang since 2.0.2?
If you could please have a look at the configuration (migrated from
2.0.2, where it was working)
and output below.
The username for the request is Mac284-1.
This username is NOT in the passwd-file, which explains the
"Failed retrieving values required to evaluate condition" part.
But then why is notfound -> FALSE?
Should´nt notfound be true and the request thus be rejected?
/etc/raddb/sites-enabled/default:
authorize {
...
maclist
if (notfound) {
reject
}
if ( mac-add !~ /%{Calling-Station-ID}/i) {
reject
}
...
}
/etc/raddb/mods-available/passwd:
passwd maclist {
filename = /etc/raddb/maclist
format = "*User-Name:~mac-add"
}
/etc/raddb/maclist:
Macxxx:00236C94ED49
And the output:
Fri Feb 10 19:10:31 2017 : Debug: (5) suffix: No '@' in User-Name =
"Mac284-1", looking up realm NULL
Fri Feb 10 19:10:31 2017 : Debug: (5) suffix: No such realm "NULL"
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
returned from suffix (rlm_realm)
Fri Feb 10 19:10:31 2017 : Debug: (5) [suffix] = noop
Fri Feb 10 19:10:31 2017 : Debug: (5) if (Called-Station-ID =~ /:test$/) {
Fri Feb 10 19:10:31 2017 : Debug: No matches
Fri Feb 10 19:10:31 2017 : Debug: Adding 1 matches
Fri Feb 10 19:10:31 2017 : Debug: (5) if (Called-Station-ID =~
/:test$/) -> TRUE
Fri Feb 10 19:10:31 2017 : Debug: (5) if (Called-Station-ID =~ /:test$/) {
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
calling eap (rlm_eap)
Fri Feb 10 19:10:31 2017 : Debug: (5) eap: Peer sent EAP Response
(code 2) ID 6 length 1276
Fri Feb 10 19:10:31 2017 : Debug: (5) eap: No EAP Start, assuming it's
an on-going EAP conversation
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
returned from eap (rlm_eap)
Fri Feb 10 19:10:31 2017 : Debug: (5) [eap] = updated
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
calling files (rlm_files)
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
returned from files (rlm_files)
Fri Feb 10 19:10:31 2017 : Debug: (5) [files] = noop
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
calling maclist (rlm_passwd)
Fri Feb 10 19:10:31 2017 : Debug: (5) modsingle[authorize]:
returned from maclist (rlm_passwd)
Fri Feb 10 19:10:31 2017 : Debug: (5) [maclist] = ok
Fri Feb 10 19:10:31 2017 : Debug: (5) if (notfound) {
Fri Feb 10 19:10:31 2017 : Debug: (5) if (notfound) -> FALSE
Fri Feb 10 19:10:31 2017 : Debug: (5) if ( mac-add !~
/%{Calling-Station-ID}/i) {
Fri Feb 10 19:10:31 2017 : ERROR: (5) Failed retrieving values
required to evaluate condition
More information about the Freeradius-Users
mailing list