Hello,
I have setup FreeRADIUS 0.4 to use my existing MySQL db to do auth.
Everything works terrific, even got redundancy working.
I do have one problem though. All of my users will be using the same reply
settings, so I have them all set to use the same group "default"
Everything in the radgroupreply table comes back ok, except if I have to
different rows with the same Attribute name, in which case it is only
displaying the first instance of the attribute name.
For instance, I have this for my table:
mysql> select * from radgroupreply;
+----+-----------+-----------------------+---------------------------------------+
| id | GroupName | Attribute | Value
|
+----+-----------+-----------------------+---------------------------------------+
| 1 | default | Auth-Type | Crypt-Local
|
| 2 | default | Service-Type | Framed-User
|
| 3 | default | Framed-Protocol | PPP
|
| 4 | default | Ascend-Assign-IP-Pool | 0
|
| 11 | default | Ascend-Data-Filter | ip in forward dstip
216.237.152.16/28 |
| 12 | default | Ascend-Idle-Limit | 1800
|
| 10 | default | Ascend-Data-Filter | ip in forward tcp est
|
+----+-----------+-----------------------+---------------------------------------+
Everything returns, except the id 11 Ascend-Data-Filter line. id 12 returns
ok. Here is a sample radtest:
radtest [EMAIL PROTECTED] password moped 0 radiussecret
Sending Access-Request of id 55 to 10.1.1.5:1645
User-Name = "[EMAIL PROTECTED]"
Password = "Crypt-ed password is here"
NAS-IP-Address = 10.1.1.5
NAS-Port-Id = "0"
rad_recv: Access-Accept packet from host 10.1.1.5:1645, id=55, length=96
Service-Type = Framed-User
Framed-Protocol = PPP
Ascend-Assign-IP-Pool = 0
Ascend-Data-Filter = "ip input forward tcp"
Ascend-Idle-Limit = 1800
I searched Google for a while for relevant results, and the only thing I
could find was a reference to ICRadius, stating that someone was having the
same problem. The URL is:
http://radius.innercite.com/archive/2000/07/0064.html
In it, he states that it will return multiple identical Attribute values if
they are entered in raduserreply, as opposed to radgroupreply.
Has anyone else experienced the same issue? If this has been covered
previously, please accept my apologies. The bug search wasn't working as of
this writing.
Thanks,
Jeremy Brown
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
