[RADIATOR] tacacs_client_identifier hook not working in 4.21

[Hugh Irvine]

Hello Alex -

I use this method at other sites - much easier.

regards

Hugh


> On 9 Oct 2018, at 22:39, <Alexander.Hartmaier at t-systems.com> <Alexander.Hartmaier at t-systems.com> wrote:
> 
> Hi Heikki,
> I've found a workaround that I like more than using a hook: just fill the OSC-Client-Identifier attribute in the ClientListSQL query.
> Do you see any downsides of doing it this way?
> 
> Thanks, Alex
> 
> T-SYSTEMS AUSTRIA GESMBH
> TCO Local Network Factory
> Alexander Hartmaier
> Operation Manager Authentication
> Rennweg 97-99, A-1030 Vienna
> +43 57057 4320 (phone)
> +43 676 8642 4320 (mobile)
> E-mail: alexander.hartmaier at t-systems.com
> http://www.t-systems.at
> http://blog.t-systems.at
> 
> BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.
> 
> ******************************************************************
> T-Systems Austria GesmbH, Rennweg 97-99, A-1030 Vienna
> Commercial Court Vienna, FN 79340b
> **********************************************************************************
> Notice: This e-mail contains information that is confidential and may be
> privileged. If you are not the intended recipient, please notify the sender
> and then delete this e-mail immediately.
> **********************************************************************************
> 
> ________________________________________
> Von: radiator <radiator-bounces at lists.open.com.au> im Auftrag von Heikki Vatiainen <hvn at open.com.au>
> Gesendet: Montag, 08. Oktober 2018 15:56
> An: radiator at lists.open.com.au
> Betreff: Re: [RADIATOR] tacacs_client_identifier hook not working in 4.21
> 
> On 08/10/2018 11.49, Alexander.Hartmaier at t-systems.com wrote:
> 
>> On the new servers the OSC-Client-Identifier isn't populated by the
>> PreHandlerHook named 'tacacs_client_identifier' from goodies/hooks.txt.
> 
>> Please check if this is a bug, thanks!
> 
> This seems to be a bug in the sample hook. Radius::Client::findAddress
> has been documented to use binary address, not string, for a long time
> but it has worked with the both. This did change in 4.21 which caused
> the hook to break.
> 
> Doing this before calling findAddress should fix it and also work with
> older versions.
> 
> $client_addr = Radius::Util::inet_pton($client_addr);
> 
> Thanks for letting us know about this,
> Heikki
> 
> --
> Heikki Vatiainen <hvn at open.com.au>
> 
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, TACACS+, PAM, Active Directory,
> EAP, TLS, TTLS, PEAP, WiMAX, RSA, Vasco, Yubikey, HOTP, TOTP,
> DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, etc.
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
hugh at open.com.au

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER, SIM, etc. 
Full source on Unix, Linux, Windows, macOS, Solaris, VMS, NetWare etc.