Thanks Fajar. In previous mail, "Push Policy" means Radius Attribute only. I am using EAP-TLS and When a client sends a radius request with username "user1" to radius server. In access accept I am able to see attributes configured in users file being returned. In */etc/raddb/users* file *user1 Cleartext-Password := "user1"* * Tunnel-Type := 13, Tunnel-Medium-Type := 6, Tunnel-Private-Group-Id := "guest", * * LVL7-Wireless-Client-Policy-Dn := "policy1"*, Similarly for a usergroup say "usergroup1" I should send radius attributes.. Also with client Mac which can be seen in radius request as calling station id. Can we do it from modifying config files instead of modifying sql database? Regards, Subhani On Sun, Sep 30, 2012 at 4:35 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sun, Sep 30, 2012 at 4:53 PM, Subhani sk m <subhani19.cool@gmail.com> wrote:
Hi,
I am using free radius on Linux, Fedora 13. I am able to push policy for a user.. I need help on two scenarios given below.
1.how to push policy for a specific usergroup from free radius sever
Depends on what you mean by "push policy". If it's just "return some radius attribute"), then if you use database, simply put it on radgroupreply table. See the included documentation, or http://wiki.freeradius.org/modules/Rlm_sql
2. how to push a policy for a specific Calling-Station-ID like 00:16:6F:A2:XX:XX [ no user specific policy returned]
Short version? Use unlang (http://freeradius.org/radiusd/man/unlang.html)
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html