MAC or user auth

tnt at kalik.co.yu tnt at kalik.co.yu
Wed Dec 12 14:17:10 CET 2007


No, radcheck.

1. Enable mac auth in hotspot profile (login-by=mac) - mac address will
be checked first, if there is no match user will be sent to the login
form

2. For mac addresses make such entries in radcheck:

UserName   Attribute  Op  Value
some-mac-address   Auth-Type   :=   Accept

3. For users make stanard radcheck entries:

UserName   Attribute  Op  Value
someuser   Cleartext-Password   :=   somepass

Ivan Kalik
Kalik Informatika ISP


Dana 12/12/2007, "CoMeC" <comec at e-comec.com> piše:

>Ok,
>
>thanks, 
>
>so in radreply I have to use:
>
>some-mac-address   Attribute  Op  Value
>
>?
>
>
>Thx,
>
>CoMeC
>
>
>On Wed, 12 Dec 2007 13:17:41 +0100, <tnt at kalik.co.yu> wrote:
>> MAC address in mac auth is sent as User-Name not Calling-Station-Id.
>> 
>> So, for mac auth:
>> 
>> some-mac-add-ress   Auth-Type := Accept
>> 
>> For a user:
>> 
>> username   Clertext-Password := "hispassword"
>> 
>> Ivan Kalik
>> Kalik Informatika ISP
>> 
>> 
>> Dana 12/12/2007, "CoMeC" <comec at e-comec.com> piĹĄe:
>> 
>>>Hi,
>>>
>>>I try to configure such a solution:
>>>
>>>Authorization via MAC Address (with no username required) - if the
>> machine
>>>is using a valid IP Address, it is automatically allowed to surf.
>>>(I know there is a Calling-Station-id attribute in radcheck)
>>>
>>>
>>>But I need also a support for username/password authentification (via
>> WWW)
>>>too.
>>>
>>>When I try to log in only with MAC, I get a Radius responce "no
>> username",
>>>and the machine is denied.
>>>
>>>How/where in radiusd.conf can I make changes?
>>>
>>>Thx in advance,
>>>
>>>Best regards,
>>>
>>>CoMeC
>>>
>>>-
>>>List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>>
>>>
>> 
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list