Hi. Thanks for your thoughts. On 11/23/05, Alan DeKok <aland@ox.org> wrote:
florian broder <flobroed@googlemail.com> wrote:
The only thing I'm currently unaware of is, where I can tell freeradius to use Call-Check together with mysql, I think it's somewhere in sql.conf?
No, it's also in the "radcheck" table.
Ok, instead of a password I use Atribute "Calling-Station-ID" with Value <mac-address>?
Only thing that need to be done IMO is to tell radius, that there is no
username and authentication needs to be done on a caller-id basis.
In radcheck, also set "Auth-Type := Accept" if the MAC & Call-Check match.
Can you tell me, how to do that? I mean, setting Auth-Type when it matches? radcheck: username: ?? (there isn't any! --> use DEFAULT?) attribute 1: calling-station-id value 1: mac attribute 2: service-type value2: 10 (call-check) attribute 3: auth-type value 3: accept Is that ok? But how has the authorize_check_query to be done? -- Tha Radius should be used ONLY for Mac-Authentication internally (just our LAN). Idea is, that a Switch-Port (VLAN, Access or trunk...) is configured by a script depending on the connecting mac-address. As I've said, I haven't deployed freeradius yet, so maybe the next question is really stupid... In sql.conf. "authorize_check_query" takes all values (belonging to a user-name) from radcheck and tries to match them with the attributes which have been sent?! But the Switch definitely sends NO user-name, i've checked that with Ethreal. I still don't understand, how sql-config should be done, if there _isn't_ any username, just a caller id. Thanks a lot i advance, and really sorry for stealing your time! Bye Flo