Re: How to get vendor-specific attribute value pairs

2013-07-15 Thread Mathieu Simon
As a short update on this topic - I thought it might be worth sharing the update since I've been successfull in getting authorized via FR to privileged exec mode on a Netgear GSM7224P (F/W 1.0.1.21). Netgear is based on Broadcom FASTPATH (MIBs tell so) - as do some Dell PowerConnect's and

How to get vendor-specific attribute value pairs

2013-07-10 Thread Mathieu Simon
G'day list I have been tinkering with some Netgear managed L2/L3 switching stuff and got the login working via freeradius (actually quite simple compared to EAP stuff for wireless). But when issuing enable after login, going into what they call Privileged EXEC mode it will - very similar to

Re: How to get vendor-specific attribute value pairs

2013-07-10 Thread Arran Cudbard-Bell
On 10 Jul 2013, at 12:46, Mathieu Simon mathieu@gmail.com wrote: G'day list I have been tinkering with some Netgear managed L2/L3 switching stuff and got the login working via freeradius (actually quite simple compared to EAP stuff for wireless). But when issuing enable after

Re: How to get vendor-specific attribute value pairs

2013-07-10 Thread Mathieu Simon
G'day 2013/7/10 Arran Cudbard-Bell a.cudba...@freeradius.org On 10 Jul 2013, at 12:46, Mathieu Simon mathieu@gmail.com wrote: FreeRADIUS doesn't have a dictionnary for Netgear stuff yet, I don't think Netgear copied Cisco's own AVpair use, but in case they do have own AV pairs, how

Re: How to get vendor-specific attribute value pairs

2013-07-10 Thread A . L . M . Buxey
Hi, Thank you Arran, that's what I suspected but hoped that there would be another way to find out. I'll see if Netgear is willing to approve existence of AV pairs (and if theyre willing to share them). on some kit you can run a command to see the VSA list/desc most vendors will

Re: how to get vendor specific attribute value

2010-10-08 Thread Noura Kossentini
Hi but the issue is from free radius response why it send unknown attribute??? is there sometink that lack?? May be I have problem in adding new VSA dictionary file into Freeradius, I hope that you agree to help me solve my problem. Below you can find my dictionary VENDOR Ps BEGIN-VENDOR Ps

Re: how to get vendor specific attribute value

2010-10-08 Thread Alan DeKok
Noura Kossentini wrote: Hi but the issue is from free radius response why it send unknown attribute??? is there sometink that lack?? Yes. Wireshark doesn't have copies of the dictionary. The dictionaries are required to decode the attribute. This is how FreeRADIUS works. May be I have

Re: how to get vendor specific attribute value

2010-10-08 Thread Noura Kossentini
Hi but why wireshark can see other attributes (like Idle-Timeout, service-type ...) without having dictionary.rfc2865?? 2010/10/8 Alan DeKok al...@deployingradius.com Noura Kossentini wrote: Hi but the issue is from free radius response why it send unknown attribute??? is there sometink

Re: how to get vendor specific attribute value

2010-10-08 Thread Alan DeKok
Noura Kossentini wrote: Hi but why wireshark can see other attributes (like Idle-Timeout, service-type ...) without having dictionary.rfc2865?? Because the Wireshark software includes RADIUS dictionaries. Alan DeKok. - List info/subscribe/unsubscribe? See

how to get vendor specific attribute value

2010-10-07 Thread Noura Kossentini
Hello, I want to retrieve the value of the vsa attribute from the Access-accept response of free radius (I use tiny radius client). I tried to add attribute in the users file like this: testing Cleartext-Password := t...@titi ROLE = user But I found unknown attribute sent in the

Re: how to get vendor specific attribute value

2010-10-07 Thread Alan DeKok
Noura Kossentini wrote: Hello, I want to retrieve the value of the vsa attribute from the Access-accept response of free radius (I use tiny radius client). Ask them how to use their API. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html