Class Attribute Missing for Anonymous Users
Alan DeKok
aland at deployingradius.com
Thu Sep 21 22:06:31 CEST 2017
On Sep 21, 2017, at 3:31 PM, Selahattin Cilek <selahattin_cilek at hotmail.com> wrote:
>
> I use FreeRADIUS 3.0.15 and for some strange reason, the Unifi APs
> refuse to append the Class attribute for those users that use anonymous
> identity.
>
> Here are 4 accounting packets that were generated by the same UAP for
> the same user. When she does not use anonymous identity, we see the
> Class attribute. But when she *does* use anonymous identity, the Class
> attribute goes missing:
That's not good.
> I think the UAP is trying to protect the user's privacy and I hate that.
It's not supposed to be smart. It's supposed to do what the RADIUS server tells it to do.
> I will definitely get in touch with Ubnt and ask them to change this
> behaviour.
That's the best approach.
> But is there anything I can do on the FreeRADIUS server to
> make sure that the Class attribute is present in all accounting packets?
No. The AP creates the accounting packets. No amount of poking FreeRADIUS will fix a broken AP.
Alan DeKok.
More information about the Freeradius-Users
mailing list