Class Attribute Missing for Anonymous Users

Alan DeKok aland at deployingradius.com
Thu Sep 21 22:06:31 CEST 2017


On Sep 21, 2017, at 3:31 PM, Selahattin Cilek <selahattin_cilek at hotmail.com> wrote:
> 
> I use FreeRADIUS 3.0.15 and for some strange reason, the Unifi APs 
> refuse to append the Class attribute for those users that use anonymous 
> identity.
> 
> Here are 4 accounting packets that were generated by the same UAP for 
> the same user. When she does not use anonymous identity, we see the 
> Class attribute. But when she *does* use anonymous identity, the Class 
> attribute goes missing:

  That's not good.

> I think the UAP is trying to protect the user's privacy and I hate that. 

  It's not supposed to be smart.  It's supposed to do what the RADIUS server tells it to do.

> I will definitely get in touch with Ubnt and ask them to change this 
> behaviour.

  That's the best approach.

> But is there anything I can do on the FreeRADIUS server to 
> make sure that the Class attribute is present in all accounting packets?

  No.  The AP creates the accounting packets.  No amount of poking FreeRADIUS will fix a broken AP.

  Alan DeKok.




More information about the Freeradius-Users mailing list