<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 77.95pt 1.0in 77.95pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hey guys,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I am still waiting for a possible solution
for this problem that I have… Please let me know even there is no easy
fix. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>To refresh your memory, I am doing MAC
address authentication bypass. It looks to me that the “users” file
takes precedence than “sites-available/default”. Whenever there is
a default entry in the “users” file, freeradius server doesn’t
try to run the module/function in the “authentication” section…
I have attached the debug for the both cases. Please take a look whenever you
can. Thank you!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Difan<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradius.org
[mailto:freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradius.org]
<b><span style='font-weight:bold'>On Behalf Of </span></b><st1:PersonName
w:st="on">Difan Zhao</st1:PersonName><br>
<b><span style='font-weight:bold'>Sent:</span></b> Wednesday, December 30, 2009
12:19 PM<br>
<b><span style='font-weight:bold'>To:</span></b> <st1:PersonName w:st="on">FreeRadius
users mailing list</st1:PersonName><br>
<b><span style='font-weight:bold'>Subject:</span></b> RE: MAC authentication
bypass --- How amIsupposedto?edit?theusersfileto include multiple MAC
addresses??</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hey guys,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Since I have asked so many questions
regarding to this topic I guess you all know my situation very well so I
won’t go through the whole thing again and save your time!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>So I found that if I add a “</span></font><b><font
size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:blue;font-weight:bold'>Default</span></font></b><font size=2 color=navy
face=Arial><span style='font-size:10.0pt;font-family:Arial;color:navy'>”
line at the bottom of the </span></font><b><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue;font-weight:bold'>users</span></font></b><font
size=2 color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'> file, like:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=red face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:red'>…<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=red face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:red'>DEFAULT
Auth-Type = ntlm_auth<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>The server will always use ntlm for
authentication… even I have updated the </span></font><b><font size=2
color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:blue;font-weight:bold'>auth-type</span></font></b><font size=2
color=navy face=Arial><span style='font-size:10.0pt;font-family:Arial;
color:navy'> to Auth-NHSTB, it doesn’t use it. I have attached both debug
files. What should I do if I want a “Default” line in the user file
while still use the special authentication that I defined for MAC
authentication bypass? Thanks!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><b><font size=2 color=navy face="Courier New"><span
style='font-size:10.0pt;color:navy;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoPlainText><b><font size=2 color=blue face="Courier New"><span
style='font-size:10.0pt;color:blue;font-weight:bold'>Policy.conf:<o:p></o:p></span></font></b></p>
<p class=MsoPlainText><b><font size=2 color=blue face="Courier New"><span
style='font-size:10.0pt;color:blue;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>policy {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
…<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
rewrite_calling_station_id {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
if(request:Calling-Station-Id =~ /00-A0-08-([0-9A-F]{2})-([[0-9A-F]{2})-([[0-9A-F]{2})/i)
{<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
update request {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
Calling-Station-Id := "00a008%{1}%{2}%{3}"<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
else {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
noop<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'> }<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>}</span></font>
<o:p></o:p></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><b><font size=2 color=blue face="Courier New"><span
style='font-size:10.0pt;color:blue;font-weight:bold'>Default:<o:p></o:p></span></font></b></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>authorize {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
…<o:p></o:p></span></font></p>
<p class=MsoPlainText style='margin-left:.5in;text-indent:.5in'><font size=2
color=red face="Courier New"><span style='font-size:10.0pt;color:red'>rewrite_calling_station_id<o:p></o:p></span></font></p>
<p class=MsoPlainText style='margin-left:.5in;text-indent:.5in'><font size=2
color=red face="Courier New"><span style='font-size:10.0pt;color:red'>if((Service-Type
== 'Call-Check') && (User-Name =~ /^%{Calling-Station-ID}$/i)){<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
update control {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
Auth-Type = 'Auth-NHSTB'<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText style='text-indent:.5in'><font size=2 color=red
face="Courier New"><span style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>authenticate {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
…<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
Auth-Type Auth-NHSTB {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
if(request:User-Name == "%{request:User-Password}") {<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
ok<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
else{<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
reject<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>
}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'> }<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 color=red face="Courier New"><span
style='font-size:10.0pt;color:red'>}<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Guest-tek, <st1:PersonName w:st="on">Difan Zhao</st1:PersonName><o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>difan.zhao@guest-tek.com<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>www.guest-tek.com<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Office: 403-509-1010 ext 3048<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Cell: 403-689-7514<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>