Group-Name in freeradius reply item list

Nikos Mavrogiannopoulos n.mavrogiannopoulos at gmail.com
Mon Mar 28 06:56:24 PDT 2016


On Fri, 2016-03-25 at 21:59 +0800, Yick Xie wrote:
> Hi,
> 
> I found the attribute Group-Name(1030) cannot go in the reply item
> list, as it is mentioned in
> /usr/local/share/freeradius/dictionary.freeradius.internal, meanwhile
> other attributes in this list work fine such as Reply-Message. I
> tested with radtest and tshark, and no such attribute was captured. 
> Is
> it ignored by both tools? Or I missed something need to be configed 
> in freeradius?

Indeed, that attribute cannot be send by freeradius. This is pretty
much an experimental attribute used by ocserv as such. Do you know any
standard attribute that could hold the group name? If there isn't any
maybe ocserv should stop supporting the group-name at all.

regards,
Nikos





More information about the openconnect-devel mailing list