Authorise based on Calling Station ID ?

Alan DeKok aland at deployingradius.com
Mon Mar 10 22:49:22 CET 2014


Darren Ward (darrward) wrote:
> I guess the question is because the accounting files are the only place that contains both the calling-station-id and username how can I write unlang in the authorise that would be able to look up the active session to match the mac address?

  If the Calling-Station-ID and User-Name only appear in accounting
messages, then you can't check for them in the authorize section.

> i.e. I would need to parse the accounting files for the mac address and find the matching username then look up the username in the 'users' file to authorise with the appropriate attributes

  That won't work.  Accounting happens AFTER authorization.  You'll need
to find another solution.

  Run the server in debugging mode.  Odds are you'll see something
useful in the Access-Request.

  Alan DeKok.


More information about the Freeradius-Users mailing list