Doty, Seth wrote: > I have downloaded and installed the git repo version of what will become > 2.1.11 on May 10 because of a proxy bug that is fixed in this version. > In our current testing setup freeradius takes all information from the > realm and passes in to a MS network policy server for authentication > into AD. The authentication portion appears to work and we get an > accept, but we are not getting any of the group information passed from > the freeradius server to the wireless controller. It appears that > freeradius is receiving it, just not passing it along.
The debug log shows why this is happening. The group information is being sent in the Access-Challenge from the home server. That's wrong. It's not supposed to be there. In addition, the group information is *not* being sent in the Access-Accept. It *is* supposed to be there. Sadly, FR is working correctly. Fix your home server to send the group information in the Access-Accept, and it will work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html