hi,

i'm using fr 1.1.2 and perl 5.8.4, and wrote a simple perl script to  
return 2 random lns's for a given huntgroup.

$ uname -a
Linux radius1_staging 2.6.8-x4100-1 #1 SMP Wed Jun 7 08:58:42 BST  
2006 x86_64 GNU/Linux

this is what i have in "users", right at the top:
#
[EMAIL PROTECTED] Huntgroup-Name == testhuntgroup
         Framed-Protocol = PPP,
         Service-Type = "Dialout-Framed-User"

DEFAULT Auth-Type = Perl
         Fall-Through = 1

DEFAULT Huntgroup-Name == othergroup, Suffix == "@foo"
...
#

i have radiusd.conf setup as per http://wiki.freeradius.org/Rlm_perl  
and the following group in authorize:

                 group {
                         ldap {
                                 fail = return
                                 notfound = return
                         }
                         files {
                                 ok = 1
                         }
                         perl {
                                 ok =1
                         }
                         auth_log
                         ok = return
                 }

my perl simply slurps a file with the several lns parameters and  
returns 2 randomly chosen ones through %RAD_REPLY:

sub authorize {

# boring file reading and random op...

     my ( $ip1, $password1, $pref1 ) = @{ $lns[$lns1] };
     $RAD_REPLY{'Tunnel-Server-Endpoint:1'}  = $ip1;
     $RAD_REPLY{'Tunnel-Type:1'}             = "L2TP";
     $RAD_REPLY{'Tunnel-Medium-Type:1'}      = "IP";
     $RAD_REPLY{'Tunnel-Password:1'}         = "$password1";
     $RAD_REPLY{'Tunnel-Assignment-Id:1'}    = "1";
     $RAD_REPLY{'Tunnel-Preference:1'}       = "$pref1";

     my ( $ip2, $password2, $pref2 ) = @{ $lns[$lns2] };
     $RAD_REPLY{'Tunnel-Server-Endpoint:2'}  = $ip2;
     $RAD_REPLY{'Tunnel-Type:2'}             = "L2TP";
     $RAD_REPLY{'Tunnel-Medium-Type:2'}      = "IP";
     $RAD_REPLY{'Tunnel-Password:2'}         = "$password2";
     $RAD_REPLY{'Tunnel-Assignment-Id:2'}    = "2";
     $RAD_REPLY{'Tunnel-Preference:2'}       = "$pref2";

     return RLM_MODULE_UPDATED;
}

what i'm seeing in the respose are mixed av pairs, and the connection  
fails (i assume because the data for each tunnel is incomplete). here  
is what i see in the logs and the response sent:

rlm_perl: Added pair Tunnel-Assignment-Id = 2
rlm_perl: Added pair Tunnel-Medium-Type = IP
rlm_perl: Added pair Tunnel-Type = L2TP
rlm_perl: Added pair Tunnel-Server-Endpoint = x.x.x.x
rlm_perl: Added pair Tunnel-Password = foo
rlm_perl: Added pair Tunnel-Assignment-Id = 1
rlm_perl: Added pair Service-Type = Dialout-Framed-User
rlm_perl: Added pair Tunnel-Medium-Type = IP
rlm_perl: Added pair Tunnel-Server-Endpoint = y.y.y.y
rlm_perl: Added pair Framed-Protocol = PPP
rlm_perl: Added pair Tunnel-Type = L2TP
rlm_perl: Added pair Tunnel-Preference = 1
rlm_perl: Added pair Tunnel-Password = bar
rlm_perl: Added pair Tunnel-Preference = 50

here it seems to be ignoring the :1 and :2 for each tunnel. this then  
results in the following reply, with values from borh tunnels mixed:

Sending Access-Accept of id 234 to t.t.t.t port 9208
         Framed-Protocol = PPP
         Service-Type = Dialout-Framed-User
         Tunnel-Assignment-Id:2 = "2"
         Tunnel-Medium-Type:1 = IP
         Tunnel-Type:1 = L2TP
         Tunnel-Server-Endpoint:2 = "x.x.x.x"
         Tunnel-Password:2 = "foo"
         Tunnel-Preference:2 = 1

am i doing something wrong, and if so, what? any help much appreciated.

thanks in advance,

pedro
--
This email and any attachments may be confidential and/or legally privileged. 
If you have received this e-mail and you are not a named addressee, please 
inform the sender of this email by sending a return email to the address above 
and then delete the e-mail and your response from your system. If you are not a 
named addressee you must not use, disclose, distribute, copy, print or rely on 
this e-mail. Any views or opinions presented are solely those of the author. 
Any statements made, or intentions expressed in this communication may not 
necessarily reflect the view of Easynet. No content herein will bind Easynet or 
any associated company unless confirmed by the execution of a formal contract 
by Easynet. Any figures or amounts given in this email are quotations only and 
are subject to change. Although Easynet routinely screens for viruses, 
addressees should scan this e-mail and any attachments for viruses. Easynet 
makes no representation or warranty as to the absence of virus!
 es in this e-mail or any attachments. Please note that to ensure regulatory 
compliance and for the protection of our customers and business, we may monitor 
and read e-mails sent to and from our server(s). 

Easynet Limited a company incorporated and existing under the laws of England 
and Wales, with company number 2954343 and having its registered office at 
44-46 Whitfield Street London, W1T 2RJ.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to