Changing it to Cisco-Account-Info creates a different problem. Only the first VSA of that name gets sent back in the Access-Accept response. Is this behavior configurable?
On 9/15/06, Kevin Bonner <[EMAIL PROTECTED]> wrote:
On Friday 15 September 2006 14:39, A. K. wrote:
> User profile is as follows:
>
> "test" Auth-Type := Local, User-Password == "test"
> Idle-Timeout = 300,
> Session-Timeout = 1560,
> Acct-Interim-Interval = 600,
> Account-Info = "QU;8000;4000;D;8000;4000",
> Reply-Message = Authenticated,
> Cisco-Account-Info = Axxx
>
> All attributes are returned in the Access-Accept message except for:
>
> Account-Info = "QU;8000;4000;D;8000;4000"
>
> Am I violating some sort of syntax restriction?
$ grep Account-Info share/dictionary*
share/dictionary.cisco:ATTRIBUTE Cisco-Account-Info 250 string
In the default dictionary files, I see no Account-Info attribute. Did you add
this to your local dictionary file? When you run freeradius in debug mode,
do you see an error when it encounters that line?
Kevin Bonner
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
