Hi all,
   I am trying to set FreeRADIUS up to manage access through a bunch of HP 420wl wireless access points...

My first problem is this... I want any devices that I know about (ie have their MAC addresses) to join 1 VLAN, wheras if I do not have their addresses thay join a different VLAN...

this is what I have got so far (users file):

##  this works - the logs show this authenticates OK:
00-0e-35-31-5c-1b       Auth-Type == Local,User-Password == "00-0e-35-31-5c-1b"              

## Following doesn't work - always fails on password match
DEFAULT                 Auth-Type == Local,User-Password != ""

I've tried all sort of oterh things -    User-Password =* "anything"
                                                    User-Password =~ ".*"
can';t find anything that works

Thanks in advance for any help

cheers

Jim Potter


Logs:

Top bit working OK:

rad_recv: Access-Request packet from host 10.14.99.251:1179, id=83, length=73

        User-Name = "00-0e-35-31-5c-1b"

        User-Password = "00-0e-35-31-5c-1b"

  Processing the authorize section of radiusd.conf

modcall: entering group authorize for request 0

    users: Matched entry 00-0e-35-31-5c-1b at line 1

  modcall[authorize]: module "files" returns ok for request 0

modcall: group authorize returns ok for request 0

  rad_check_password:  Found Auth-Type Local

auth: type Local

auth: user supplied User-Password matches local User-Password

Sending Access-Accept of id 83 to 10.14.99.251:1179

        Tunnel-Medium-Type:0 = 802

        Tunnel-Private-Group-Id:0 = "20"

        Tunnel-Type:0 = VLAN

Finished request 0

 

Bottom bit failing:

rad_recv: Access-Request packet from host 10.14.99.251:1181, id=84, length=73

        User-Name = "00-0e-35-31-5c-1c"

        User-Password = "00-0e-35-31-5c-1c"

  Processing the authorize section of radiusd.conf

modcall: entering group authorize for request 0

    users: Matched entry DEFAULT at line 6

  modcall[authorize]: module "files" returns ok for request 0

modcall: group authorize returns ok for request 0

  rad_check_password:  Found Auth-Type Local

auth: type Local

auth: user supplied User-Password does NOT match local User-Password

auth: Failed to validate the user.

Delaying request 0 for 1 seconds

Finished request 0




--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.