Hello,
I have freeradius 0.4 sending Ascend-Data-Filter = "<rules>" with
access-accept packet. The dictionary.ascend file contains the appropriate
lines:
ATTRIBUTE Ascend-Data-Filter 242 abinary
Ascend
ATTRIBUTE Ascend-Call-Filter 243 abinary
Ascend
I am certain this file is being read and included at startup.
Problem:
In both radiusd -X debug output, and also radtest output, the values being
sent appear to be in string format, not abinary. I have ./configure
--with-ascend-binary just to make sure it was included.
Just to check I have also applied the un-smash patch to freeradius 0.1 and
the same exact thing happens. I have compiled 0.4 on a separate freebsd
server and the same thing happens.
Users file entry:
user Crypt-Password == "$1$EcD4B36z$", Huntgroup-Name == "test"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.0.254,
Framed-IP-Netmask = 255.255.255.254,
Ascend-Data-Filter += "ip in forward tcp est",
Ascend-Data-Filter += "ip in forward dstip 192.168.0.1/24",
Ascend-Data-Filter += "ip in drop tcp dstport = 25",
Ascend-Data-Filter += "ip in forward",
Fall-Through = No
radtest output:
/root# radtest user pass radius.server radius secret
Sending Access-Request of id 177 to 192.168.0.1:1645
User-Name = "user"
Password = "\243P\2210\253Z@\304>8D'_\201\021\352"
NAS-IP-Address = 192.168.0.2
NAS-Port-Id = "radius"
rad_recv: Access-Accept packet from host 192.168.0.1:1645, id=177,
length=204
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 192.168.0.254
Framed-IP-Netmask = 255.255.255.254
Ascend-Data-Filter = "ip input forward tcp"
Ascend-Data-Filter = "ip input forward 0 dstip 192.168.0.1/24"
Ascend-Data-Filter = "ip input drop tcp dstport = 25"
Ascend-Data-Filter = "ip input forward 0"
What's going on here? Does -X debug output and radtest automatically
translate the abinary back into a string before display? If so how can I
turn that off? I need to see the abinary format.
Any help would be appreciated.
Thanks
PSingh
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
