Re: AVPair question
Andrey [EMAIL PROTECTED] wrote: When I try to authenticate, I get unknown-vendor 8744, size 30 = '' for my attributes dump. What am I missing? Is there a separate file for defining vendors? That message is not coming from FreeRADIUS. The message means that the client is being sent the attribute, but doesn't understand it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: AVPair
Adam Binks [EMAIL PROTECTED] wrote: E.g. we force all of our dial customers to use 192.168.1.45:3128 for http traffic ? That's an issue for the NAS. Read the NAS documentation to see: 1) If it supports this behavior 2) what radius attribute is used to configure this behavior Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: AVPair
Thanks... However, I am using a shared NAS and therefore have no control over it hence why I need to do this via radius Can you help further ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: 25 April 2005 21:29 To: freeradius-users@lists.freeradius.org Subject: Re: AVPair Adam Binks [EMAIL PROTECTED] wrote: E.g. we force all of our dial customers to use 192.168.1.45:3128 for http traffic ? That's an issue for the NAS. Read the NAS documentation to see: 1) If it supports this behavior 2) what radius attribute is used to configure this behavior Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.10.2 - Release Date: 21/04/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.10.2 - Release Date: 21/04/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: AVPair
Adam Binks [EMAIL PROTECTED] wrote: Thanks... However, I am using a shared NAS and therefore have no control over it hence why I need to do this via radius Huh? Can you help further ? ... Read the NAS documentation to see: ... 2) what radius attribute is used to configure this behavior What more do you want? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: AVPair
Ok, the NAS that we use is from a major UK telco ! We dont have any control over it and can not make changes to it The telco sends radius packets to our radius servers were we then hand out an IP address and DNS servers I also want to use our Radius server to send back a proxy server address forcing all HTTP traffic through the proxy server. I hope this is clearer Adam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: 25 April 2005 21:35 To: freeradius-users@lists.freeradius.org Subject: Re: AVPair Adam Binks [EMAIL PROTECTED] wrote: Thanks... However, I am using a shared NAS and therefore have no control over it hence why I need to do this via radius Huh? Can you help further ? ... Read the NAS documentation to see: ... 2) what radius attribute is used to configure this behavior What more do you want? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.10.2 - Release Date: 21/04/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.10.2 - Release Date: 21/04/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: AVPair
Adam Binks [EMAIL PROTECTED] wrote: I also want to use our Radius server to send back a proxy server address forcing all HTTP traffic through the proxy server. I hope this is clearer It was perfectly clear from your first message. This isn't an unusual request. What is NOT clear, apparently is my response. I don't understand why. In order for the NAS to redirect traffic, the RADIUS server has to tell the NAS to redirect the traffic. I hope this is clear. In order for the RADIUS server to tell the NAS to redirect the traffic, you have to configure the RADIUS server. You appear to be be clear on this, as am I. In order for you, the administrator to know how to configure the RADIUS server, you have to read the RADIUS server documentation. This should be clear, but it's only part of the solution. The point of confusion is that WHAT goes into the RADIUS server configuration depends on what NAS you're using. No one but you knows what NAS you're using, so no one but you can answer that question. I have told you this multiple times, and each time you have ignored the answer. I really don't understand why, when I keep saying read the NAS documentation, your response is I want the NAS to redirect traffic. If you're not going to read the responses on this list, then don't ask questions. Alan DEKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: AVPair
Ok please accept my apologies There are two environments here 1. Cisco AS5300 2. Cisco 7204xvr terminating a BT adsl pipe Adam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: 25 April 2005 21:50 To: freeradius-users@lists.freeradius.org Subject: Re: AVPair Adam Binks [EMAIL PROTECTED] wrote: I also want to use our Radius server to send back a proxy server address forcing all HTTP traffic through the proxy server. I hope this is clearer It was perfectly clear from your first message. This isn't an unusual request. What is NOT clear, apparently is my response. I don't understand why. In order for the NAS to redirect traffic, the RADIUS server has to tell the NAS to redirect the traffic. I hope this is clear. In order for the RADIUS server to tell the NAS to redirect the traffic, you have to configure the RADIUS server. You appear to be be clear on this, as am I. In order for you, the administrator to know how to configure the RADIUS server, you have to read the RADIUS server documentation. This should be clear, but it's only part of the solution. The point of confusion is that WHAT goes into the RADIUS server configuration depends on what NAS you're using. No one but you knows what NAS you're using, so no one but you can answer that question. I have told you this multiple times, and each time you have ignored the answer. I really don't understand why, when I keep saying read the NAS documentation, your response is I want the NAS to redirect traffic. If you're not going to read the responses on this list, then don't ask questions. Alan DEKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.10.2 - Release Date: 21/04/2005 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.10.2 - Release Date: 21/04/2005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: AVPair
Mike Chamberlain [EMAIL PROTECTED] wrote: Thanks for your help with this. One last question: the NAS is sending through multiple AVPair attributes (I can see they are getting added by looking at the log file), but I only ever seem to be able to access the final one added. I'm not sure why that's happening. It should be the first one. Is there a way to access all the AVPair attributes using FreeRadius? In the latest CVS snapshot, see doc/variables.txt That functionality is not in 1.0.x. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
