search

agdsn / hades

AG DSN Authentication and Authorization Infrastructure
MIT License
8 stars 3 forks source link

Adds Compatibility for D-Link DGS-3100-24 in domitory Gerokstraße 38 #80

Closed strebbin closed 5 years ago

strebbin commented 6 years ago

The DGS-3100-24-Switches in the dormitory Gerokstraße 38 don't send a Service-Type in their request so the current implementation of verify_calling_station_id fails, as is assumes that this attribute is present.

Also these switches use eap and on eap we return before querying the database and thereby do not receive the required attributes for setting a vlan. The D-Links radius implementation sets the port to unauthenticated, if the authenticated message form radius does not contain a vlan-attribute. So the client is blocked and has no chance to see the captive portal or use the internet.

I testet the changes in our live-setup and could correctly authenticate a client with it.

sebschrader commented 6 years ago

Does a synthetic test via radeapclient work too?