[Jradius] How to use vendor specific attributes?

[Karuna G. Kumar]

David,

Thanks for the response. I need little more help from you. Because, still JRadius cannot read my VSAttribute.

I have rebuild the dictionary as explained and created a jradius-dictionary.jar. I have placed this jar file in jradius's lib folder and restarted the JRadius server. 

After that, I have sent auth request to the JRadius handler (LocalUsersHandler.java). Authentication is successful but throwing the following exception while sending the response attributes back.

# Log:
------

>>> packets in request from "example":
--- packet 1 of 2
Class: class net.jradius.packet.AccessRequest
Attributes:
User-Name = test
Acct-Session-Id = 001
NAS-Identifier = 00:E0:81:2A:45:FA
NAS-IP-Address = 192.168.1.109
Called-Station-Id = called
Calling-Station-Id = caller
NAS-Port = 1234
NAS-Port-Type = Ethernet
User-Password = [Encrypted String]

--- packet 2 of 2
Class: class net.jradius.packet.NullPacket
Attributes:

Configuration Items:
User-Password := [Encrypted String]
Cleartext-Password := test123
JRadius-Session-Id := e026a240c242c7362d6997c5678c5727 JRadius-Request-Id := 66

Appropriate session locking must be implemented
net.jradius.exception.UnknownAttributeException: Unknown attribute Pronto-AVPair
	at net.jradius.packet.attribute.AttributeFactory.newAttribute(AttributeFactory.java:306)
	at net.jradius.packet.attribute.AttributeFactory.newAttribute(AttributeFactory.java:343)
	at com.pronto.handler.LocalUsersHandler$LocalUser.getAttributeList(LocalUsersHandler.java:109)
	at com.pronto.handler.LocalUsersHandler.handle(LocalUsersHandler.java:249)
	at net.jradius.handler.PacketHandlerBase.handle(PacketHandlerBase.java:49)
	at net.jradius.handler.EventHandlerBase.execute(EventHandlerBase.java:66)
	at net.jradius.server.RadiusProcessor.runPacketHandlers(RadiusProcessor.java:130)
	at net.jradius.freeradius.FreeRadiusProcessor.processRequest(FreeRadiusProcessor.java:57)
	at net.jradius.server.Processor.process(Processor.java:123)
	at net.jradius.server.Processor.run(Processor.java:99)
14 Jul, 2010 3:44:33 PM net.jradius.log.BaseRadiusLog info
INFO: Allowing WPA access for username: test Appropriate session locking must be implemented Appropriate session locking must be implemented Appropriate session locking must be implemented

>>> packets in request from "example":
--- packet 1 of 2
Class: class net.jradius.packet.AccessRequest
Attributes:
User-Name = test
Acct-Session-Id = 001
NAS-Identifier = 00:E0:81:2A:45:FA
NAS-IP-Address = 192.168.1.109
Called-Station-Id = called
Calling-Station-Id = caller
NAS-Port = 1234
NAS-Port-Type = Ethernet
User-Password = [Encrypted String]

--- packet 2 of 2
Class: class net.jradius.packet.AccessAccept
Attributes:
Reply-Message = Hello test user!
Session-Timeout = 3600
Idle-Timeout = 300
User-Name = test
Class := [Binary Data (length=46)]

Configuration Items:
Cleartext-Password := test123
JRadius-Session-Id := e026a240c242c7362d6997c5678c5727 JRadius-Request-Id := 66 Auth-Type = PAP


# Jradius-config.xml:
---------------------
.
.
.
<users>
<user username="test" password="test123">
  Reply-Message = Hello test user!
  Session-Timeout = 3600
  Idle-Timeout = 300
  User-Name = test
  Pronto-AVPair = test
</user>
</users>
.
.

# After executing build_dictionary.sh... file.list inside tmp-dictionary folder shows the following.

./net/jradius/dictionary/vsa_pronto/VSADictionaryImpl.java
./net/jradius/dictionary/vsa_pronto/Attr_ProntoAVPair.java

# In tmp-dictionary folder, net/jradius/dictionary/vsa_pronto/Attr_ProntoAVPair.java shows following.

Public final class Attr_ProntoAVPair extends VSAttribute
{
	Public static final String NAME = "Pronto-AVPair";
	.
	.
	.


What went wrong? Please help. Thanks in advance.

- Karun.


-----Original Message-----
From: wlanmac [mailto:wlan at mac.com] 
Sent: Thursday, July 08, 2010 11:49
To: Karuna G. Kumar
Subject: Re: [Jradius] How to use vendor specific attributes?

You can use VSAs just like any other attribute in JRadius. If you are
wanting to create your own VSAs, then model a dictionary file off of the
FreeRADIUS dictionary files that come with JRadius. Then (re)build the
JRadius dictionary (http://www.coova.org/JRadius/Dictionary) where your
new dictionary file is includes in the main "dictionary" file (also make
sure the same dictionary files are used in FreeRADIUS too). 

David


On Thu, 2010-07-08 at 11:26 +0530, Karuna G. Kumar wrote:
> Hi,
> 
>  
> 
> I am using FreeRADIUS and JRadius. That means, rlm_jradius module in
> FreeRADIUS. Using JRadius handler to process authentication,
> authorization and accounting.
> 
>  
> 
> Now, I don’t know how to use vendor specific attributes in request and
> response objects. Please provide me any documentation on how to
> configure this. Thanks in advance.
> 
>  
> 
> - Karun.
> 
> 
> _______________________________________________
> Jradius mailing list
> Jradius at coova.org
> http://lists.coova.org/cgi-bin/mailman/listinfo/jradius