Bruce Eckstein wrote: > I am trying to get freeradius to authorize the services on an Alvarion .. > the following users were defined with these replies in the user file > "[email protected]" Cleartext-Password := "wimax" > Filter-Id = "SP=sp1:MSF=msf1;SP=sp_data_eth:MSF=msf_data_eth;", > Session-Timeout = 1200, Termination-Action = RADIUS-Request > "KeepAliveUserNameAndPassword" Cleartext-Password := > "KeepAliveUserNameAndPassword" > Filter-Id = "SP=sp1:MSF=msf1;SP=sp_data_eth:MSF=msf_data_eth;", > Session-Timeout = 1200, Termination-Action = RADIUS-Request
Set "use_tunneled_reply" in raddb/modules/eap > fr seems to work. I see that the Filter-Id is indicated for the reply > (see below). The Access-Accept doesn't seem to contain Filter-Id. > The Alvarion CPE does get authenticated according to the CPE but there > are no services defined for the CPE > > sp1, msf1, sp_data_eth, and msf_data_eth are all defined in the BTS. > What is it that I am missing in configuration of the FreeRadius? If the Access-Accept contains the correct Filter-Id, then the Alvarion GW isn't applying the filter. Fix it, not FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

