Sergey writes:
> Fletcher Mattox <[EMAIL PROTECTED]> wrote:
>
> > Hi,
> >
> > I'm new here. I am trying to pass the framed ip address to
> > Exec-Program-Wait
> > with an entry like this in my users file:
> [...]
> > While the other parameters are passed correctly, %C{Framed-IP-Address}
> > shows up as 0. What am I missing?
>
> You did everything right. What happens is that your NAS does not send
> this attribute with Access-Request packets.
That's a shame. The NAS is a Cisco 3000 VPN Concentrator. I want to make
an authentication decision based on this IP address. I notice that it
*does* send it in an accounting packet one second later, because radiusd
logs it in /var/log/radacct/1.2.3.4/detail, and because it appears in
radutmp and radwtmp. Can you think of any clever way I can use this
information for authentication? I *might* be able to simply run radwho
from the Exec-Program-Wait program, but I fear that radutmp will not
have been updated at that time.
Also, I will ask Cisco if the Framed-IP-Address can somehow be included
in the Access-Request packet, but I fear they will say no.
Thanks, Sergey, for your quick response,
Fletcher
_______________________________________________
Help-gnu-radius mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/help-gnu-radius
