MAC Auth tied to user

johan firdianto johanfirdi at gmail.com
Tue Aug 11 12:52:19 CEST 2015


should i need to define temporary atrribute in dictionary or not ?
thanks.
Pada 11 Agt 2015 17.14, <A.L.M.Buxey at lboro.ac.uk> menulis:

> Hi,
>
> > anyone here have experience to implement
> > authorization and accounting from mac to user ?
>
> no - but the request is fairly simple
>
> > For example:
> > User john is tied to mac aa-bb-cc-dd-ee-ff.
> > every authorization comes from this mac,
> > radius will check session for user john.
> > and do accounting for user john also.
> > So, every packet auth/acct come from NAS, username 'mac'  will be
> replaced
> > to 'user' subsquent process.
> > i think unlang is the solution.
> > anyone here could give us suggest/idea ?
>
> use unlang.  you have a DB lookup to convert the MAC to the username -
> assign a temporary
> attribute and use that in the acct update call rather than User-Name
> (which would be the MAC)
>
> alan
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list