Re: Auth by NAS-Identifier using unlang

2013-08-06 Thread Alan Buxey
I assume that's the freeradius2 package rather than freeradius as 1.x doesn't have unlang alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Auth by NAS-Identifier using unlang

2013-08-06 Thread John Dennis
On 08/06/2013 02:31 AM, Alan Buxey wrote: I assume that's the freeradius2 package rather than freeradius as 1.x doesn't have unlang The OP said Fedora. Fedora has never had a freeradius2 package (only ever existed in RHEL 5.x). Fedora has had 2.x for many years. So either the OP is using an

Auth by NAS-Identifier using unlang

2013-08-05 Thread Joseph Perrin
I was thinking this should be easy, but it's been two weeks and I give up... This is what I want to do: My NAS, (a WiFi AP), has two SSIDs: staff and guests. I want mutual exclusivity. My /etc/raddb/users file contains something like this: abc Cleartext-Password:=xyz

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread Arran Cudbard-Bell
Running radiusd -X I get: : ++? if (Local-Group != NAS-Identifier ) (Attribute Local-Group was not found) ? Evaluating (Local-Group != NAS-Identifier ) - FALSE ++? if (Local-Group != NAS-Identifier ) - FALSE : And it's clear Local-Group is always empty. :-( Yeah you've

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread A . L . M . Buxey
Hi, I was thinking this should be easy, but it's been two weeks and I give up... well, depends how you do itif you do it easy it is easy, no? users file abc Cleartext-Password := xyz, NAS-Identifier = staff Reply-Message Welcome on-board staff member dont forget, if this

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread Joseph Perrin
Changing the Local-Group into the request still makes control:Local-Group empty. abc Cleartext-Password:=xyz, Local-Group:=staff NAS Sends this: User-Name = abc : NAS-Identifier = resident if ( control:Local-Group != NAS-Identifier ) { Diagnostic says: ++? if

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread Arran Cudbard-Bell
Diagnostic says: ++? if (control:Local-Group != NAS-Identifier ) - FALSE Assuming you're not looking for a literal value 'NAS-Identifier', you want %{NAS-Identifier}. If this is a new deployment you should use current HEAD revision in Master. Then you can use the debug_attr expansion to

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread Joseph Perrin
The following appears to now work, but I don't understand some things: files if (control:Local-Group != %{NAS-Identifier} ) { Why does control:Local-Group not need to be enclosed in %{ }, but NAS-Identifier does? And why does %{ } content need to be within quotes, when the documentation doesn't

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread Arran Cudbard-Bell
On 5 Aug 2013, at 22:37, Joseph Perrin jos...@lifeonthestreet.org wrote: The following appears to now work, but I don't understand some things: files if (control:Local-Group != %{NAS-Identifier} ) { Why does control:Local-Group not need to be enclosed in %{ }, but NAS-Identifier

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread Joseph Perrin
Thank you. I now understand. A stock install of freeRadius in Fedora, (i.e. via yum), does not provide a man page for unlang. Had you not helped me, I'd simply not know. On Mon, Aug 5, 2013 at 6:00 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 5 Aug 2013, at 22:37, Joseph

Re: Auth by NAS-Identifier using unlang

2013-08-05 Thread John Dennis
On 08/05/2013 08:49 PM, Joseph Perrin wrote: Thank you. I now understand. A stock install of freeRadius in Fedora, (i.e. via yum), does not provide a man page for unlang. Had you not helped me, I'd simply not know. Nonsense, the freeradius rpm installs the unlang man page. Please provide