Looking for a little guidance on how to send user specific attributes
to over-ride NAS defaults. NAS is a Colubris MSC-3200. In their public
access guide, Colubris explains how to set a welcome-url for different
groups... ie.

"Add the following entry to the RADIUS profile for the basic cust
welcome-url=web_server_URL/basic/welcome.html
goodbye-url=web_server_URL/basic/goodbye.html

Add the following entry to the RADIUS profile for the premium cust
welcome-url=web_server_URL/premium/welcome.html
goodbye-url=web_server_URL/premium/goodbye.html"

I have:
mysql> select username,attribute,op,value from radreply;
+-----------+--------------------+----+-----------------------------------------------------------------------+
| username  | attribute          | op | value
                                       |
+-----------+--------------------+----+-----------------------------------------------------------------------+
| ewsandbox | Colubris-AVPair    | += |
access-list=loginserver,ACCEPT,tcp,192.168.10.23,all
|
| ewsandbox | Colubris-AVPair    | += | use-access-list=loginserver
                                       |
| ewsandbox | Colubris-AVPair    | += |
login-url=http://192.168.10.23/hotspots/ewsandbox/login.html
|
| ewsandbox | Colubris-AVPair    | += |
session-page=http://192.168.10.23/hotspots/ewsandbox/session.html
|
| ewsandbox | Colubris-AVPair    | += |
fail-page=http://192.168.10.23/hotspots/ewsandbox/fail.html
|
| ewsandbox | Colubris-AVPair    | += |
transport-page=http://192.168.10.23/hotspots/ewsandbox/transport.html
|
| fred      | Service-Type       | =  | Framed-User
                                       |
| fred      | Framed-Protocol    | =  | PPP
                                       |
| fred      | Framed-IP-Address  | =  | 192.168.1.55
                                       |
| fred      | Framed-IP-Netmask  | =  | 255.255.255.0
                                       |
| fred      | Framed-Routing     | =  | Broadcast-Listen
                                       |
| fred      | Framed-Filter-Id   | =  | std.ppp
                                       |
| fred      | Framed-MTU         | =  | 1500
                                       |
| fred      | Framed-Compression | =  | Van-Jacobsen-TCP-IP
                                       |
| fred      | Colubris-AVPair    | += |
welcome-url=http://www.escapewire.com
|
+-----------+--------------------+----+-----------------------------------------------------------------------+

Colubris-AVPair is defined in the supplied dictionary, but I find that
although the attribute is sent...

Sending Access-Accept of id 217 to 192.168.10.30 port 32770
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-IP-Address = 192.168.1.55
        Framed-IP-Netmask = 255.255.255.0
        Framed-Routing = Broadcast-Listen
        Framed-Filter-Id = "std.ppp"
        Framed-MTU = 1500
        Framed-Compression = Van-Jacobson-TCP-IP
        Colubris-AVPair += "welcome-url=http://www.escapewire.com";
        MS-CHAP2-Success =
0xd9533d33434337424430333430374637464633424639433338323739464444364530324237393137333736
        MS-MPPE-Recv-Key = 0xd0ceed0c246d4cf37fd9586a5098b5f4
        MS-MPPE-Send-Key = 0xc7928fb94ffcb4acc06a838dfaa933f7
        MS-MPPE-Encryption-Policy = 0x00000001
        MS-MPPE-Encryption-Types = 0x00000006
Finished request 8.

That the redirection is not working. I also tried with a modified
radreply entry, simply using welcome-url as the attribute and op of :=
(after defining welcome-url in the dictionary), but this does not work
either.

I understand the list is not support for Colubris, but I hope someone
with more experience can tell me how I might be misinterpreting the
instructions.

Thank you.

Andrew Long

FreeRADIUS Ver. 2.1.3
Backend: MySQL
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to