In looking closer at why checkrad was not working for
me I think this might be a bug... from line 320...

sub cisco_snmp {

        # Look up community string in naspasswd file.
        my ($login, $pass) = naspasswd($ARGV[1], 1);
        if ($login && $login ne 'SNMP') {
                if ($debug) {
                        print LOG
                        "   Error: Need SNMP community string for $ARGV[1]\n";
                }
                return 2;
        } else {
                $pass = "public";
        }

This is always going to set $pass to "public" whereas
when I need a private community string in naspasswd
then that else clause needs to be commented out to work.

This works for me...

        if ($login && $login ne 'SNMP' || $pass eq '') {
                if ($debug) {
                        print LOG
                        "   Error: Need SNMP community string for $ARGV[1]\n";
                }
                return 2;
        }


Also, the comments say this

# Returns:      0 = no duplicate, 1 = duplicate, >1 = error.

but I always get a "1" returned from snmpget() even
though the user is only logged in once, am I missing
something here ?

--markc

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to