>"CHui" <[EMAIL PROTECTED]> wrote:
>> Although it seems to work for me, I am not sure about the use of
attribute
>> Class for tracking user ID would interfere with other operation (like the
> one attribute Class was originally designed for)?
>
> It was designed for local sites to do whatever they wanted. So you're
doing the right thing.
>
>> Also, the attribute Class is of type Octet. Does anyone know of a way to
>> convert it to text in SQL?
>
> Edit the dictionary, and change "octets" to "string".
>
> Alan DeKok.
Never thought of simply changing the attribute type in the dictionary file.
Works great. Thanks.
I use the "use_tunneled_reply = yes" in eap.conf to capture the user name
inside of the tunnel. I have observed that the Class attribute now
contained both the outer identity and the user name from inside the tunnel.
>From the debug output:
Sending Access-Accept of id 170 to 198.128.24.10:1645
Class = "SomeoneElse"
Cisco-AVPair = "ssid=CiscoTestAP"
Session-Timeout = 60
Class = "chui.guest"
MS-MPPE-Recv-Key = 0x...
MS-MPPE-Send-Key = 0x...
EAP-Message = 0x03070004
Message-Authenticator = 0x...
User-Name = "SomeoneElse"
Finished request 6
Going to the next request
Waking up in 6 seconds...
rad_recv: Accounting-Request packet from host 198.128.24.10:1646, id=112,
length=262
Acct-Session-Id = "0600000000000204"
Called-Station-Id = "0014.a800.44c0"
Calling-Station-Id = "0002.2d27.05e2"
Cisco-AVPair = "ssid= CiscoTestAP"
Cisco-AVPair = "vlan-id=0"
Cisco-AVPair = "nas-location=unspecified"
User-Name = "SomeoneElse"
Cisco-AVPair = "connect-progress=Call Up"
Acct-Authentic = RADIUS
Acct-Status-Type = Start
NAS-Port-Type = Wireless-802.11
Cisco-NAS-Port = "708"
NAS-Port = 708
Class = "SomeoneElse"
Class = "chui.guest"
Service-Type = Framed-User
NAS-IP-Address = 198.128.24.10
Acct-Delay-Time = 0
In the users file, I have the default entry as follows:
DEFAULT
Class = "{User-Name}",
Fall-Through = No
What should I do to get the Tunnel user name only instead of both send as
reply attribute "Class"?
Thanks
Cedric
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
