proxy request ok, but incomplete access-accept to my Aruba

[Alan Buxey]

you need to have eg

update reply {
Aruba-User-Vlan := vlaind number"
Aruba-User-Role := "authenticated"
etc etc
}

in the post-proxy section or post-auth....

alan


On 13 October 2017 at 14:10, Ramon Escriba <escriba at cells.es> wrote:
> Dear Alan,
> The problem are not the fields, but where I shall  insert them in the current  "proxy" related config.
>
> Right now, in "users" file I've this DEFAULT that works fine for my local @my-realm.com, but not for external "@ACME.COM",
>
> The proxy returns ok, but without fields for Aruba.
>
> DEFAULT
>         Aruba-User-Vlan = <vlaind number>,
>         Aruba-User-Role = "authenticated",
>         (....)
>         Termination-Action = 1,
>         Reply-Message = "WELCOME TO @ MY-REALM.COM",
>         Session-Timeout = 3600,
>         Tunnel-Type = VLAN,
>         Tunnel-Medium-Type = IEEE-802
>
> Any clue about?
>
> Kindest Regards.
>
>
>
> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-bounces+escriba=cells.es at lists.freeradius.org] On Behalf Of Alan DeKok
> Sent: viernes, 13 de octubre de 2017 13:21
> To: FreeRadius users mailing list
> Subject: Re: proxy request ok, but incomplete access-accept to my Aruba
>
> On Oct 13, 2017, at 6:17 AM, Ramon Escriba <escriba at cells.es> wrote:
>> It works perfect with my @my-realm.com, but when I send test realms to
>> the external proxy, it accepts the query (see below logs),
>
>   That's good.
>
>> but seems the Access-Accept packet does not complete the fields my
>> Aruba needs to open the vlan, as I do in @my-realm.com with users file.
>
>   That's not good.
>
>> How can I complete the "Access-Accept" packet I send to my Aruba?
>
>   Read the Aruba documentation to see what attributes it needs.
>
>   Then, configure FreeRADIUS to send those attributes.
>
>   Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html