Hi, I'm giving a detailed description of my problem here Im setting up 802.1x port based authentication using wire1x as supplicant and freeradius as the server.I have configured switch for 802.1x and using eap-tls as authentication protocol.freeradius is configured to authenticate the client with username and password. My problem is i want to sent a bit(P bit) along with this username which will be taken into account for the authentication.for this i planned to send the username as P<specialcharacter>UserName.and wire1x will send the username as usual. Now at the freeradius side i have to seperate this new user name to P and UserName.and and make the authentication as(hypothetically): if(recieved (username,password)=(username,password)in clients.conf)&&bit P==1) { authenticate(return 0) } I found that the username,password checking is done in auth.c file.i have to add 1 more condition to that. Hope i have explained my problem well.and hope u will give enough suggestions. thank you On Thu, Apr 21, 2011 at 4:22 PM, Brian Candler <B.Candler@pobox.com> wrote:
On Wed, Apr 20, 2011 at 08:30:28PM +0530, ashwini b wrote:
thank you for the suggestion.but as i mentioned earlier i'm really a newcomer in this field..
where should i make these changes?and i hav to authenticate the user based on username ,password and the checkbit(as mentioned earlier).Can u suggest how i could accomplish this.a detailed explanation will be a great help...
You will make the change in sites-available/default in the "authorize" section. "man unlang" will tell you more about the language you can use in here.
I can't give you any more detailled description of the solution, because you haven't given a detailled description of the problem. All you've said is you're "sending a bit along with the username". Maybe you could give an example of what the modified username looks like, and how you want the username to look after restoring it?