I am in process to replace our Cisco ACS to Freeradius for our wireless authentication and trying to achieve same functionality as ACS. Here is what i need.
1. It should authenticate against AD.
2. User should be checked in specific group in AD and have specific Called-Station-id ( If Users in AD group == Students and Called-Station-ID== *SSID then Accept-Accept).
3. There is should be multiple policy for various condition match like above.
4. Default should be Reject.
5. All user auth (pass/fail) should be logged in file/syslog with rejection reason.
I have achieve only 1st point.
Any one has done same ? is it possible in Freeradius? can someone point me to right direction or share config.
I will really appreciate the help
Thank you
--
Zafar Pravaiz
Senior Systems Engineer
Information Technology Department
Tel +971 6 515 2164
Fax +971 6 515 2112
American University of Sharjah
PO Box 26666, Sharjah
United Arab Emirates
http://www.aus.edu
zpravaiz@aus.edu