-
Notifications
You must be signed in to change notification settings - Fork 310
Closed
Description
Describe the bug
If you use a RADIUS source with authorization rules (admin context) and your source is configured with "Use connector" enabled, RADIUS response will be ignored.
If you disable "Use Connector", everything works as expected.
I tried to use same source (with "Use connector" enabled) on captive portal and it works.
To Reproduce
Steps to reproduce the behavior:
- Configure a RADIUS server
- Create your RADIUS source with "Use Connector" enabled
- Create an administration rule on that source
- Try to authenticate on webadmin using an account on your RADIUS server
=> Following message will appear in logs:
Feb 23 11:20:14 pfdeb11localdev pfperl-api-docker-wrapper[2050]: pfperl-api(16) ERROR: [mac:[undef]] Unable to perform RADIUS authentication on any server: ETIMEOUT (pf::Authentication::Source::RADIUSSource::_handle_radius_request)
Expected behavior
Access to web admin granted
Additional context
I captured traffic on port use by pfconnector and I can see that RADIUS server is returning an Access-Accept.
Reactions are currently unavailable