Adding attribute to Access-Accept message

[Matthew Newton]

On 05/10/2023 11:09, Anders Sørensen wrote:
> This works, but getting the SMS fails, since the firewall is looking for the attribute “mobile” in the response from the radius server.

What attribute? RADIUS attributes are defined by numbers, the dictionary 
converts the numbers to names to make it easier for humans.

> The solution, I thought, was adding the attribute in the post-auth area in my default site file.
> 
> update {
> &reply:User-Name := 'Hej'
> &reply:mobile := 'Trala'
> }

Potentially, yes. But...

> I have also added the “mobile” attribute to the “Dictionary” file:
> 
> ATTRIBUTE       mobile                  3000    string

No. That file says that numbers in the range 3000+ are internal use 
only. They will never get onto the wire.

You need to look in the firewall documentation to find out exactly what 
attribute it wants, and not just make one up yourself.

It's pretty likely that the attribute is already defined in the 
FreeRADIUS dictionaries, in which case just use that.

Only if the attribute is not defined will you need to edit the 
dictionary file and add it yourself.

> What am I missing? It's probably something obvious, but I’ve gone through so many files, that by now I have probably confused myself.

Read the firewall documentation and find out what attribute it wants, 
then set that attribute as you have done above.

-- 
Matthew