Mac Auth and post-auth logging to SQL

[Phil Mayers]

On 03/29/2011 08:52 PM, Jason Antman wrote:
> This makes MUCH more sense, thanks! Now the next (relatively
> new-to-radius) person won't end up as confused as I was.
>
> I have MAC auth working with a SQL data source and custom XLAT to check
> for some special field values in SQL, based on a somewhat custom schema
> (more from the one-row-per-MAC standpoint than using radcheck and

Yeah, we do a similar thing with a database stored procedure to allocate 
an appropriate vlan by mac & location combo; it's basically along the 
lines of:

update control {
   Tmp-String-0 := "%{sql:select .. from proc('%{Calling-Station-Id}')"
}
if (control:Tmp-String-0 =~ /...regexp for SQL result.../) {
   update reply {
     # vlan
     Tunnel-Private-Group-Id := "%{1}"
     Other-Stuff := "%{2}"
   }
}

FreeRadius is damn clever when you grasp it ;o)

> radreply), as well as xlat to include a Username in the reply message.
> When I'm finished with it and have it working, I'll be more than willing
> to pass along my code.

Alan can probably give you a wiki account if you want to document it there.