usename + password + MAC address

Hilton Guaraldi guaraldi at gmail.com
Mon Sep 14 05:30:13 CEST 2009


Let me ask something about attr_rewrite in order to give the
possibility to work with my 6 APs, and to do a rewrite of MAC to
EAP-PEAP authentication.
Would it be possible to write in radius.conf and default files the
following, avoiding many entries in the hints file?

Scenario:   AP1              ->Send client MAC 00-18-E7-41-AD-C2
                AP2,...,AP6    ->Send client MAC 0018e741adc2

In radius.conf,

attr_rewrite mac-phase1 {
                attribute = Calling-Station-Id
                new_attribute = no
                searchin = packet
                ignore_case = no
                searchfor = "-"           # Possible here doing a hyphen search
                replacewith = ""         # and replacing...
                append = no
         }

attr_rewrite mac-phase2 {
                attribute = Calling-Station-Id
                new_attribute = no
                searchin = packet
                ignore_case = no
                searchfor = "???"       # Possible here doing a
lowercase letters search
                replacewith = "???"    # and replacing by uppercase
letters, a->A, c->C, d->D, e->E, etc... Apologize me for the ???
                append = no
        }

and in default:

authorize {
        mac-phase1
        mac-phase2
        ...
}

But the problem is, I do not know how to do the replacement.
Do you know how can I do this with an expression in mac-phase2?

And in mac-phase1 the hyphen search is correct?

The benefit would be one Calling-Station-Id with uppercase letters
without hyphens entry in MySQL radcheck table for each user...

The operator in MySQL radcheck table to work with Calling-Station-Id
string is == .
If MAC now is 0018E741ADC2, after running mac-phase2,  the operator
must change?

Best regards,
Guaraldi



2009/9/13 Ivan Kalik <tnt at kalik.net>:
>> Ok, it works, but a new problem emerged....
>>
>> I have 6 AP´s. One of them send the MAC in the following format:
>> 00-18-E7-41-AD-C2. The others send 0018e741adc2... Here the letters
>> are in lowercase and if changed to uppercase the authentication fails
>> from 5 AP´s.
>
> Rewrite Calling-Station-Id in hints file to the format you want (probably
> best without separators). You have examples for regex rewriting mac
> address in other threads on the list.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>




More information about the Freeradius-Users mailing list