trying to get an ACK for a computone intelliserver

[Alan DeKok]

Pn Jun 23, 2020, at 2:25 PM, The Doctor via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> Script started on Tue Jun 23 12:12:11 2020
> You have mail.
> root at doctor:~ # /usr/freerad3/sbin/radiusd -X -sx

  So... you're not following the documentation, despite REPEATED instructions to do so.

> Tue Jun 23 12:12:40 2020 : Debug:   update {
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Serial}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Expiration}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Subject}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Issuer}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Common-Name}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Cert-Subject-Alt-Name-Email}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Serial}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Expiration}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Subject}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Issuer}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Common-Name}"
> Tue Jun 23 12:12:40 2020 : Debug:    &reply:Reply-Message += "%{TLS-Client-Cert-Subject-Alt-Name-Email}"
> Tue Jun 23 12:12:40 2020 : Debug:   }

  I have no idea why you uncommented that.  It doesn't do anything useful.

> Even if the usrname/password is correct, the NAS is not getting 
> clearance to continue.  What bridge needs to built?

  You're making random changes to the config, and failing to follow the documentation.

  Can you explain why you think it's important for you to not follow the documentation?

  Can you explain why you ask for help, and then ignore our advice?

  Alan DeKok.