Actions
Regression #13356
closed
AB
MM
RADIUS authentication attempts no longer send RADIUS NAS IP attribute
Regression #13356:
RADIUS authentication attempts no longer send RADIUS NAS IP attribute
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
23.01
Release Notes:
Default
Affected Version:
2.7.x
Affected Architecture:
All
Description
After upgrading to pfSense Plus 22.05, the RADIUS NAS IP Attribute setting is no longer sent to the RADIUS server.
I tracked this down to the changes in commit 7c2468c510ea7da6f284a7afad7f62c6c9880717 where the attribute is read from the wrong config, e.g.
in: src/etc/inc/auth.inc
$nasip = nasip_fallback($acctcfg['radius_nasip_attribute']);
which should be:
$nasip = nasip_fallback($authcfg['radius_nasip_attribute']);
as per this link to where this was seemingly introduced: https://github.com/pfsense/pfsense/commit/7c2468c510ea7da6f284a7afad7f62c6c9880717#diff-396999417cbe304fa6006c47b6af9eac17625cbcf0bf915501f2b14e69706f99R1768
Manually modifying this file with this correction instantly resolved my issue. I suggest this is corrected for the next patch.
We use this attribute for determining the policy applied on our RADIUS server, so without this patch all RADIUS authentication failed.
Actions