<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hi!</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>Is there some way to execute a shell with freeradius? here’s my scenario:</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>- Users login to cisco wi-fi with 3 BSSID (teachers, students or employees) with LDAP credentials;</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>- I verify if user is at group X, Y or Z (LDAP-Group);</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>- *** Now, i need to verify in ldap (ldapsearch/shell) if the objectclass “userenalbled” is enabled or “expiredate” is “less” than "now” ***</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>- Then grant or not access to wifi lan.</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>This is what I did so far (eg. From students network)…</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Authenticate {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
post-auth {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
# if (LDAP-Group == “teachers" || LDAP-Group == “employees") {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
# reject</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
# else {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
# noop</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
# }</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
# }</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
}</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
}</p>
</div>
<div><br>
</div>
<div>Same file above:</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Authorize {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
update control {</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Auth-Type := `bash /opt/verify_date.sh '%{User-Name}'`</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
}</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
}</p>
</div>
<div><br>
</div>
<div>Content of “verify_date.sh” file is an ldapsearch with filters to return the values of “expiredate” or “userenabled” with “if” statements to check the results, my question is:</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>How can I work with the results of this script to allow or deny access to networks? </div>
<div><br>
</div>
<div>Thank You!</div>
</body>
</html>