<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<div class="moz-text-html" lang="x-western"> <br>
<blockquote cite="mid20060419170937.A26E716CC1@mail.nitros9.org"
type="cite">
<pre wrap="">James <a class="moz-txt-link-rfc2396E"
href="mailto:list-freeradius@qujo.com"><list-freeradius@qujo.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">My end-users right now are getting authenticated by the login-based
mysql radcheck table from freeradius and they are coming from multiple
locations through a web-based portal redirected by their gateway.
</pre>
</blockquote>
<pre wrap=""><!---->
They're being authenticated by the web portal?
</pre>
</blockquote>
The connection is setup like this:<br>
1. Laptop -> AP -> Gateway -> RADIUS & DSL Modem<br>
2. The Gateway redirects clients to a custom web portal on the web.<br>
3. when a client creates an account on the web portal, the web portal
has a custom login form for the gateway.<br>
4. when the click on submit on the custom login form , it POST's to the
gateway and the gateway communicates back to the RADIUS and them gives
them access.<br>
<br>
<blockquote cite="mid20060419170937.A26E716CC1@mail.nitros9.org"
type="cite">
<blockquote type="cite">
<pre wrap="">My question is, if there is a way to setup freeradius for example: to
allow for 3 locations to login through the login based authentication
(the way it is setup right now) and at the same time grant 2 other
locations access without the need of using login based authentication,
</pre>
</blockquote>
<pre wrap=""><!---->
So you're asking that some people get forced to use the web portal,
and others bypass it?
</pre>
</blockquote>
Right now, people are already going through the web portal or are
already "forced to use the web portal" to get authenticated. so what I
am asking for is: if there is a way to setup RADIUS to somehow send a
message or configuration attribute to the gateway to allow any clients
connected to the gateway to access the internet without extra
authentication aside from simply connecting to the gateway itself.<br>
<br>
<blockquote cite="mid20060419170937.A26E716CC1@mail.nitros9.org"
type="cite">
<pre wrap=""> This isn't a RADIUS problem. You're asking that some people (you
don't say how you determine that) bypass authentication... which means
bypassing RADIUS.
I don't see how RADIUS can tell people who don't use RADIUS that
they don't need to use RADIUS.
Alan Dekok.
</pre>
</blockquote>
Sorry if I was not clear before, I was not asking to bypass RADIUS at
all, please see the previous message.<br>
<br>
<br>
</div>
</body>
</html>