I'm giving a detailed description of my problem here
Im setting up 802.1x port based authentication using wire1x as supplicant and freeradius as the server.I have configured
switch for 802.1x and using eap-tls as authentication protocol.freeradius is configured to authenticate the client with username and password.
My problem is i want to sent a bit(P bit) along with this username which will be taken into account for the authentication.for this i planned to send the username as P<specialcharacter>UserName.and wire1x will send the username as usual.
Now at the freeradius side i have to seperate this new user name to P and UserName.and and make the authentication as(hypothetically):
if(recieved (username,password)=(username,password)in clients.conf)&&bit P==1)
{
authenticate(return 0)
}
I found that the username,password checking is done in auth.c file.i have to add 1 more condition to that.
Hope i have explained my problem well.and hope u will give enough suggestions.
thank you
On Thu, Apr 21, 2011 at 4:22 PM, Brian Candler
<B.Candler@pobox.com> wrote:
On Wed, Apr 20, 2011 at 08:30:28PM +0530, ashwini b wrote:
> thank you for the suggestion.but as i mentioned earlier i'm really a
> newcomer in this field..
>
> where should i make these changes?and i hav to authenticate the user
> based on username ,password and the checkbit(as mentioned earlier).Can
> u suggest how i could accomplish this.a detailed explanation will be a
> great help...
You will make the change in sites-available/default in the "authorize"
section. "man unlang" will tell you more about the language you can use in
here.
I can't give you any more detailled description of the solution, because you
haven't given a detailled description of the problem. All you've said is
you're "sending a bit along with the username". Maybe you could give an
example of what the modified username looks like, and how you want the
username to look after restoring it?