Re: VLAN assignment to HP Switch with 802.1x client

2013-08-09 Thread Iliya Peregoudov
On 08.08.2013 19:16, Shaw, Colin M. wrote: [peap] Using saved attributes from the original Access-Accept User-Name = testx [peap] Saving response in the cache Your inner-tunnel virtual server returns only User-Name attribute in Access-Accept. Configure your inner-tunnel virtual

RE: VLAN assignment to HP Switch with 802.1x client

2013-08-09 Thread Shaw, Colin M.
You could move files above eap but IMO it's better (cleaner, more obvious) to run this in post-auth like so: authorize { ... eap { ok = return } ... } post-auth { ... files ... } Note that you'll need to set the postauth_usersfile on your files Thank

VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Shaw, Colin M.
Hi, I'm in the process of attempting to move our 802.1x services off of an aging freeRADIUS (v1) server onto a newly built server running freeRADIUS v2.2 Tests so far with wireless clients using 802.1x PEAP/MS-CHAPv2 are working ok. Clients can authenticate (against AD) and be assigned the

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Phil Mayers
On 08/08/13 11:07, Shaw, Colin M. wrote: difference. Lastly, for testing purposes, if I insert the required attributes into the default post-auth then it all works and the wired client is assigned the correct vlan, so again the switch side must be ok and I also therefore presume all the

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Phil Mayers
On 08/08/13 16:16, Shaw, Colin M. wrote: Thanks for the reply Phil. difference. Lastly, for testing purposes, if I insert the required attributes into the default post-auth then it all works and the wired client is assigned the correct vlan, so again the switch side must be ok and I also