Class attribute questions
Greetings,
I'm trying to look at the Class attribute during proxying. I want to
take data stored in the Class attribute and rewrite other attribute(s)
based on the contents. I have it working right now but have two
questions regarding it.
1) I'm currently using rlm_exec to call a simple perl script that
"decodes" the Class attribute value (from accessing %{Class}) from it's
hex octet form back to the ASCII inside. I just wanted to make sure that
I wasn't missing something, and that there isn't an easier way to get at
the ASCII inside the octet stream.
2) The rfc's allow for more than one Class attribute (at least in
Accounting-Request packets). How does FreeRADIUS treat references to
%{Class} when this happens? i.e. Is there a syntax to refer to each
instance of the Class attr or get a count of how many are in the packet?
(I'm not currently running into this, but want to keep that base covered
in case that situation arises).
Thanks,
-Shawn
~
Shawn O'Shea
Network Engineer
Airpath Wireless, Inc.
"Clearing the Way"
781-250-3500-office
781-250-3535-direct
781-250-3503-fax
[EMAIL PROTECTED]
http://www.airpath.com
~
CONFIDENTIALITY STATEMENT
This electronic message contains information from Airpath Wireless,
Inc., and may be confidential or privileged. The information is intended
to be for the use of the individual or entity named above. If you are
not the intended recipient, be aware that any disclosure, copying,
distribution or use of the contents of this message is prohibited. If
you have received this electronic message in error, please notify the
sender immediately by reply e-mail [EMAIL PROTECTED] or telephone at
(781) 250-3500.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Class attribute questions
"Shawn K. O'Shea" <[EMAIL PROTECTED]> wrote:
> 1) I'm currently using rlm_exec to call a simple perl script that
> "decodes" the Class attribute value (from accessing %{Class}) from it's
> hex octet form back to the ASCII inside. I just wanted to make sure that
> I wasn't missing something, and that there isn't an easier way to get at
> the ASCII inside the octet stream.
Edit the dictionary, and change "octets" to "string"?
> 2) The rfc's allow for more than one Class attribute (at least in
> Accounting-Request packets). How does FreeRADIUS treat references to
> %{Class} when this happens? i.e. Is there a syntax to refer to each
> instance of the Class attr or get a count of how many are in the packet?
The CVS snapshots allow this. 1.0.x doesn't. See doc/variables.txt
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Class attribute questions
> > I just wanted to make
> > sure that I wasn't missing something, and that there isn't
> an easier
> > way to get at the ASCII inside the octet stream.
> Edit the dictionary, and change "octets" to "string"?
I saw discussion in a previous thread (Handling of the 'Class'
attribute, this post in particular,
http://lists.freeradius.org/mailman/htdig/freeradius-users/2003-July/021
267.html) that implied this was frowned upon, at least when interacting
with other RADIUS servers (which is what I'm using FreeRADIUS for), but
also because the RFC recommends that it should be treated as
undistinguished octets.
> > 2) The rfc's allow for more than one Class attribute (at least in
> > Accounting-Request packets). How does FreeRADIUS treat
> references to
> > %{Class} when this happens? i.e. Is there a syntax to refer to each
> > instance of the Class attr or get a count of how many are
> in the packet?
> The CVS snapshots allow this. 1.0.x doesn't. See doc/variables.txt
I read through the current doc/variables.txt in CVS. Looks great. Is
this a 1.1.x kind of feature or will it find it's way into a later
1.0.x?
Thanks for the reply.
-Shawn
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Class attribute questions
"Shawn K. O'Shea" <[EMAIL PROTECTED]> wrote: > I saw discussion in a previous thread (Handling of the 'Class' > attribute, this post in particular, > http://lists.freeradius.org/mailman/htdig/freeradius-users/2003-July/021 > 267.html) that implied this was frowned upon, at least when interacting > with other RADIUS servers Editing the FreeRADIUS dictionary files will have *zero* impact on other RADIUS servers. > I read through the current doc/variables.txt in CVS. Looks great. Is > this a 1.1.x kind of feature or will it find it's way into a later > 1.0.x? 1.1.x and following. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
