Hi, I have resolv my problem, i have create one user in users file validate hosts whose mac address are in authorized_macs and i have the users and passwords in ldap and this is my site-avaible/default file configuration in the authorize section:

    authorized_macs
        if (ok) {
                update control {
                        Auth-type := Accept
                                }
                files
                }
        else {
              ldap
                 if (notfound){
                        reject
                }
             }

        eap {
                ok = return
        }

I suppose that is not the most elegance way of make the configuration but it runs.

Thank you for your help.



2013/6/21 Roberto Ortega Ramiro <roberto.ortega@esj.es>
I'm not at work now, but.

This wil do that i want:



  	authorize_macs
  	if (ok) {

    		update control {
      			Auth-Type := files
    			}
  		}

        else {
              eap
              ldap

             }

Thank you.


2013/6/21 Roberto Ortega Ramiro <roberto.ortega@esj.es>
¿Is it posible to do a "if sentense" for validate the MAC address in authorized_macs with one user in users file (or other site) and others users can conect with hers user and password?

Thank you.


2013/6/21 Matthew Newton <mcn4@leicester.ac.uk>
On Fri, Jun 21, 2013 at 02:56:57PM +0200, Roberto Ortega Ramiro wrote:
> I'm trying to conect using AEP-TLS one host, and i was using one wrong user
> and password for connect the host with his mac.
> I have undertand that this is no posible. Right?

You can do EAP-TLS *and* validate the MAC address. You just can't
authenticate based on the MAC address only if you're doing EAP.

Matthew


--
Matthew Newton, Ph.D. <mcn4@le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



--
-- 
Un saludo.
____________________

Roberto Ortega
Profesor de Informática.
http://www.proyectoret.es

Escuelas San José Valencia
Avd.Cortes Valencianas nº1
46015 Valencia
R4600489A
Tf:963499011 ext. 262
Fax:963488835
http://www.escuelassj.com

No imprimas este correo si no es necesario. Protejamos el medio ambiente.



--
-- 
Un saludo.
____________________

Roberto Ortega
Profesor de Informática.
http://www.proyectoret.es

Escuelas San José Valencia
Avd.Cortes Valencianas nº1
46015 Valencia
R4600489A
Tf:963499011 ext. 262
Fax:963488835
http://www.escuelassj.com

No imprimas este correo si no es necesario. Protejamos el medio ambiente.



--
-- 
Un saludo.
____________________

Roberto Ortega
Profesor de Informática.
http://www.proyectoret.es

Escuelas San José Valencia
Avd.Cortes Valencianas nº1
46015 Valencia
R4600489A
Tf:963499011 ext. 262
Fax:963488835
http://www.escuelassj.com

No imprimas este correo si no es necesario. Protejamos el medio ambiente.