Hi all,
I am not very used to working with freeradius unfortunately and I am using the Mac Auth solution as described on your website and other then the case sensitivity it was working correctly.
I was looking for a way to change the Calling station id to lowercase, or to make the comparison case insensitive as some of our switches return mac addresses in uppercase, others in lowercase. Then I discovered a brand new function “tolower” had been added to the 2.1.10 version of freeradius and we were still at 2.1.8. So after an update I could run freeradius with the added function without errors. Unfortunately it seems not to work correctly.
Now, if a known mac address is authorized, it is rejected
[authorized_macs] expand: "%{Calling-Station-ID}" -> "00-17-42-1C-44-68"
[authorized_macs] expand: %{tolower:"%{Calling-Station-ID}"} -> "00-17-42-1c-44-68"
+++++[authorized_macs.authorize] returns noop
00-17-42-1c-44-68 does actually exist in the authorized_macs file. This used to return a match and ok when the calling station id was matched, case sensitive.
Unfortunately I do not have permission from my superiors to utilize a MySQL database yet (which would solve all of this), so I am stuck with the files for now.
Can any of you see what I am doing wrong?
modules/files
files authorized_macs {
# The default key attribute to use for matches. The content
# of this attribute is used to match the "name" of the
# entry.
key = %{tolower:"%{Calling-Station-ID}"}
usersfile = ${confdir}/authorized_macs
# If you want to use the old Cistron 'users' file
# with FreeRADIUS, you should change the next line
# to 'compat = cistron'. You can the copy your 'users'
# file from Cistron.
compat = no
}
sites-available/default
post-auth {
# output surpressed
if(control:Auth-Type == 'CSID'){
# Authorization happens here
# %{Calling-Station-ID} = %{tolower:%{Calling-Station-ID}} # here the function does not work (like this)
authorized_phones.authorize
if (!ok) {
authorized_printers.authorize
if (!ok) {
authorized_macs.authorize
if (notfound) { # notfound construction used to overcome false rejects
reject
}
else {
update reply {
Cisco-AVPair = "tunnel-type=vlan"
Cisco-AVPair = "tunnel-medium-type=802"
Cisco-AVPair = "tunnel-private-group-id=4"
}
}
}
else{
update reply {
Cisco-AVPair = "tunnel-type=vlan"
Cisco-AVPair = "tunnel-medium-type=802"
Cisco-AVPair = "tunnel-private-group-id=1"
}
}
}
else{
update reply {
Cisco-AVPair = "device-traffic-class=voice"
}
}
}
}
Chris Schaatsbergen
--
aleo solar Deutschland GmbH
Chris Schaatsbergen
IT Projekte / IT Projects
Osterstr. 15, 26122 Oldenburg
T +49 441 21988-288
F +49 441 21988-150
M +49 162 2552288
chris.schaatsbergen@aleo-solar.de
http://www.aleo-solar.de
Geschäftsführer/Management Board: York zu Putlitz, Dr. Jens Sabotke, Norbert Schlesiger
Sitz der Gesellschaft/Registered Office: Oldenburg (Oldb), Germany
Handelsregister/Companies´ Register: Oldenburg, Germany, HRB 4947