Troubel with Cisco Aironet 1130 and MAC authentication
Hi!
I'm trying to get a Cisco Aironet 1130 to do MAC authentication with freeradius and a pgsql as backend.
I Have made my own table in the pgsql witch looks like this:
radius=> select * from maskiner;
mid | mnavn | mmac | mpwd | mattr | mop
-----+--------------+-------------------+------------+-----------+----------+--------+
9 | 0016cf0157f8 | 0016cf0157f8 | radius | Password | == |
where mnavn is the name of the machine, mmac is the MAC of the machine, mpwd is a password field, mattr is the attribute field, mop is the operator.
I have tried with an Avaya AP, and it works fine.
Here is the authorize table:
authorize_check_query = "SELECT mid, mmac, mattr, mpwd, mop \
FROM maskiner WHERE LOWER(mmac) = LOWER('%{SQL-User-Name}') ORDER BY mid"
Here is the authenticate table:
authenticate_query = "select mpwd from maskiner where mmac = '%{User-Name}'";
Here is the output from freeradius:
rad_recv: Access-Request packet from host 192.168.250.28:6001, id=3, length=112
User-Name = "0016cf0157f8"
User-Password = "radius"
NAS-IP-Address = 192.168.250.28
Called-Station-Id = "00-20-a6-59-ce-93:GandrupII"
Calling-Station-Id = "00-16-cf-01-57-f8"
NAS-Port = 0
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_postgresql: query: SELECT mid, mmac, mattr, mpwd, mop FROM maskiner
WHERE LOWER(mmac) = LOWER('0016cf0157f8') ORDER BY mid
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
rlm_sql (sql): Released sql socket id: 4
Login OK: [0016cf0157f8/radius] (from client Demo port 0 cli 00-16-cf-01-57-f8)
Sending Access-Accept of id 3 to 192.168.250.28:6001
Now since the Cisco AP is sending the User-Name and User-Password in another format we have change freeradius configuration.
Here is the authorize table:
authorize_check_query = "SELECT mid, mmac, mattr, mmac, mop FROM maskiner \
WHERE LOWER(mmac) = LOWER('%{SQL-User-Name}') ORDER BY mid"
Here is the authenticate table:
authenticate_query = "select mmac from maskiner where mmac = '%{User-Name}'";
Here is the output from freeradius:
rad_recv: Access-Request packet from host 192.168.250.35:1645, id=148, length=115
User-Name = "0016cf0157f8"
User-Password = "0016cf0157f8"
Called-Station-Id = "0017.0f84.8af0"
Calling-Station-Id = "0016.cf01.57f8"
Service-Type = Login-User
NAS-Port-Type = Wireless-802.11
NAS-Port = 531
NAS-IP-Address = 192.168.250.35
NAS-Identifier = "AP-07"
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_postgresql: query: SELECT mid, mmac, mattr, mmac, mop FROM maskiner
WHERE LOWER(mmac) = LOWER('0016cf0157f8') ORDER BY mid
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: affected rows =
rlm_sql (sql): No matching entry in the database for request from user [0016cf0157f8]
rlm_sql (sql): Released sql socket id: 4
Login incorrect: [0016cf0157f8/0016cf0157f8] (from client Demo port 531 cli
0016.cf01.57f8)
Why won't it work with the Cisco, does it use another dictionary or....
Any help is appreciated!!
Thanks in advance,
Christoffer
This archive was generated by a fusion of
Pipermail (Mailman edition) and
MHonArc.