> Use a version of FreeRADIUS which has a dictionary entry for
> Delegated-IPv6-Prefix.
>
> i.e. upgrade.
Thanks.
Actual problem was that dictionary.rfc4818 was not included in dictionary file.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dmitry Kozlov wrote:
> I'm trying to include Delegated-IPv6-Prefix attribute to reply, here is
> contents of radreply table:
...
> But it rejects Access-Request and writes to log:
> rlm_sql: Failed to create the pair: Invalid octet string "fc00:1:2:2::/64"
> for
Hello.
I'm trying to include Delegated-IPv6-Prefix attribute to reply, here is
contents of radreply table:
id | username | attribute | op |
Thanks a lot Bjørn and Alan.
>> I believe it is time to revisit the Ascend dictionary fixup.
>
> I think so, yes.
>
>> Yes, I can see the point that this will break existing setups. But I
>> will argue that such setups have *always* been broken. At least when we
>> are discussing the FreeRADIUS
Bjørn Mork wrote:
> I believe it is time to revisit the Ascend dictionary fixup.
I think so, yes.
> Yes, I can see the point that this will break existing setups. But I
> will argue that such setups have *always* been broken. At least when we
> are discussing the FreeRADIUS 2.x era. You cann
ichiro tanaka writes:
> Proxy-Server recognition was repaired, if proxy-server did not include
> "dictionary.ascend".
I believe it is time to revisit the Ascend dictionary fixup. This was
done once, and then reverted for between 2.1.7 and 2.1.8:
commit e23e4754f755e6fe82a28e53ccc1b9ffcaf53fda
reshark, and compared to rfc4818(sec.3) format.
"Delegated-IPv6-Prefix" attribute that auth-server replied and reply_log looks
correct.
http://tools.ietf.org/html/rfc4818
Proxy-Server recognition was repaired, if proxy-server did not include
"dictionary.ascend".
--- auth-s
ichiro tanaka wrote:
> My freeradius proxy already includes "dictionary.rfc4818".
> Do I need something?
No idea. Maybe the attribute isn't in the correct format.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
thanks Alan.
(i couldn't get your reply to my mailbox. so, i made a new mail. sorry...)
> Fix the proxy so that it's using the dictionaries from 2.1.10. The
>debug *claims* it's 2.1.10, but the Delegated-IPv6-Prefix attribute *is*
>defined in the dictionaries for 2.1.
ichiro tanaka wrote:
> auth-server reply attribute "Delegated-IPv6-Prefix", but proxy recognize
> "Attr-123 = 0x00401234567890abcdef".
Fix the proxy so that it's using the dictionaries from 2.1.10. The
debug *claims* it's 2.1.10, but the
Hi.
auth-server reply attribute "Delegated-IPv6-Prefix", but proxy recognize
"Attr-123 = 0x00401234567890abcdef".
I used ntradping-1.5 and freeradius-2.1.10.
--hosts--
ntradping-1.5 10.233.55.200
proxy (freeradius-2.1.10) 10.233.36.101
auth-serve
11 matches
Mail list logo
