I completely agree with you! I am still curious to why adding a user is not an option though. Hopefully we will be "enlightened" as to why it is not an option.<br><br><div class="gmail_quote">2008/12/15 <span dir="ltr"><<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">To be fair, there probably is a way to create an unlang hack (are we<br>
going to advocate unlang auth now) that can tie up mac address from the<br>
user entry with the one in the mac auth request (regexp check if<br>
username is mac address; if it is see if there is such mac address in<br>
the database and force Auth-Type Accept; there was some mention of the<br>
password, but that can be sorted as well) without breaking everything<br>
else on the server.<br>
<br>
But why? If you can create user entry and add mac address as an attribute<br>
value it requires minimal effort on user admin side to create an entry<br>
with mac address as username value at the same time. A simple additional<br>
insert. Even if it is a closed code solution that you can't change, you<br>
can always make two entries - one for the user as username and one with<br>
mac address as username.<br>
<br>
Be honest, if your user admin application can't do what you want, should<br>
you:<br>
<br>
- hack your radius server?<br>
<br>
- hack your user admin application?<br>
<br>
It is credit to the quality and flexibility of Freeradius that messing<br>
with the radius server comes up as an option at all.<br>
<div class="Ih2E3d"><br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
</div>Dana 15/12/2008, "Leigh Martell" <<a href="mailto:leigh.martell@gmail.com">leigh.martell@gmail.com</a>> piše:<br>
<div><div></div><div class="Wj3C7c"><br>
>Well thats not entirely true; you can create an association table(if thats<br>
>the right term) which has id,username, mac and then edit your query with<br>
>some joins and additional magic...I would not suggest this but it is<br>
>possible just very messy. I would highly recommend doing this the<br>
>traditional way...at least if you value your sanity ;-).<br>
><br>
>--<br>
>Leigh<br>
><br>
>On Mon, Dec 15, 2008 at 4:22 PM, <<a href="mailto:tnt@kalik.net">tnt@kalik.net</a>> wrote:<br>
><br>
>> >In my case I can't look for MAC in Username field and I have to look for<br>
>> >that mac in Value field. Hope that have a way to make this happens.<br>
>> ><br>
>><br>
>> You don't seem to get the problem. You have set up your AP to do mac<br>
>> authentication. When you do that, mac address is sent in the username<br>
>> filed. If you don't want that, don't set your AP to do mac auth. Set<br>
>> it to do user authentication. When you are doung user auth, mac address<br>
>> should appear as Calling-Station-Id (should).<br>
>><br>
>> There is *nothing* you can do in freeradius that will make your AP do<br>
>> this. You have to configure the AP to do that.<br>
>><br>
>> Ivan Kalik<br>
>> Kalik Informatika ISP<br>
>><br>
>> -<br>
>> List info/subscribe/unsubscribe? See<br>
>> <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
>><br>
><br>
><br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>