Mac based auth

[Alan DeKok]

jonr at destar.net wrote:
>>   The format is whatever format the NAS sends in the User-Name attribute.
> 
> Thanks Alan, that helped more than you know.

  It's little things like that that make a *big* difference in setting
up a system for the first time.  And yes, I cover all of this in my
book, which will be done real soon now...

> This is what I am trying to do, I have a user in my users file, before they are
> allowed to authenticate I want to also check that the MAC address sent in the
> Calling-Station-Id matches what is in the users file. So I would check not only
> for the username/passowrd but also that the MAC was the same for that user.

  i.e. each user has a pre-defined MAC they're allowed to use?

> Is checkval what I am looking for or is there a certain syntax for the users
> file that I am missing? I have read the /doc/processing_users_file, man 5 users
> and been going through the config files in the /etc/raddb. directory, with no
> success.

  You can do:

bob	Calling-Station-Id != "0001....", Auth-Type := Reject


  But that's awkward to scale to many users.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog