with freeradius-0.9.0 and openldap-2.0.27 we run into a problem with users having more than one ip network.
As with freeradius-0.8.1 these users get the response Cisco-AVPair = "lcp:interface-config#1=service-policy input profile20-in" Cisco-AVPair = "lcp:interface-config#2=service-policy output profile20-out" Shasta-Service-Profile = "profile20" Session-Timeout = 72000 Framed-Route = "xxx.xxx.xxx.142.128/26 0.0.0.0 1" Framed-Route = "xxx.xxx.xxx.192/26 0.0.0.0 1" Framed-IP-Netmask = 255.255.255.255 Framed-IP-Address = yyy.yyy.yyy.yyy
but with freeradius-0.9.0 the second "Framed-Route" and "Cisco-AVPair" is missing:
Cisco-AVPair = "lcp:interface-config#1=service-policy input profile20-in"
Shasta-Service-Profile = "profile20"
Session-Timeout = 72000
Framed-Route = "xxx.xxx.xxx.142.128/26 0.0.0.0 1"
Framed-IP-Netmask = 255.255.255.255
Framed-IP-Address = yyy.yyy.yyy.yyy
I found a hint to use "Attribute += Value" if one attribute is used more than once. But there is only a 1:1 translation between LDAP-entries and radius.
How can we solve the problem?
Thanks and best regards Lothar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html