Can FreeRADIUS send non-standard VSAs?

Ian Pilcher arequipeno at gmail.com
Fri Apr 26 23:12:36 CEST 2019


On 4/26/19 3:16 PM, Alan DeKok wrote:
>     Given that they're copying the Cisco-AVPair functionality, the best guess is that it's ID 1.

That was my guess as well.  Unfortunately it's not working with ID 1,
and Dell hasn't been able to tell me what it should be (or even
demonstrate that they understand the question).

>    Sure.
> 
> 	Vendor-Specific := 0x010203040506070809 ...

Hmm.  That doesn't work for me.  I tried:

Vendor-Specific := 
0x0000178B466F72636531302D6176706169723D227368656C6C3A707269762D6C766C3D313522

(The Force10 vendor ID followed by Force10-avpair="shell:priv-lvl=15",
right out of Dell's documentation.)

This gives me:

   Must use 'Attr-26 = ...' instead of 'Vendor-Specific = ...'

So I tried:

Attr-26 := 
0x0000178B466F72636531302D6176706169723D227368656C6C3A707269762D6C766C3D313522

And got:

   Attribute overflows container

Is 3.0.13 too old or have I messed up the syntax somehow?

Thanks!

-- 
========================================================================
Ian Pilcher                                         arequipeno at gmail.com
-------- "I grew up before Mark Zuckerberg invented friendship" --------
========================================================================


More information about the Freeradius-Users mailing list