On 16.09.22 12:53, Winfield, Alister (Senior Solutions Architect) via Freeradius-Users wrote:
You need to consider what the source of the RADIUS request is doing.
In this case, (I’m assuming WiFI hotspot) It’s taking the information from a devices DHCP request and put it into a RADIUS attribute. Sadly, neither the attribute used nor the formatting of the data is well defined. So if you have >1 type of RADIUS client you may see all sort of variability eg no-colons, colons, uppercase, lowercase, with a prefix / suffix etc.
Common solution for mac address matching is to convert the incoming mac-address (here in the username attribute) to a single format that is in the user database. This requires configuration that I’m not going to try to write, partly because I’m sure such examples have been posted here in the past. Then ensure that the user database uses the same format probably by using the same logic to ensure its always in your chosen canonical form.
If you are lucky and have only one “RADIUS client” type. Just ensure the user-database format matches what you receive, and your first issue will be solved.
Alister Winfield.
I already pointed out the doc that includes the description on MAC address normalization in the FR policies. That should end the discussion about MAC address formats, because the solution is obvious.
From: Freeradius-Users <freeradius-users-bounces+alister.winfield=sky.uk@lists.freeradius.org> on behalf of Ashfaque Shaikh <ashfaque.shaikh@idfy.com> Date: Friday, 16 September 2022 at 11:26 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: [EXTERNAL] Re: Mac Authentication Hi Jochem,
Appreciate your response. Yes, I have done this but authentication is getting failed. When I am checking the logs through sudo freeradius -X, it shows user not found. In username mac address is showing like "00224DD1042B" and in dalo radius I have added a mac "00:22:4D:D1:04:2B" in this format.
So I am a little confused here, When I am doing mac based authentication then why freeradius is checking username. Can you please be able to help me with this?
Best Regards,
Ashfaque Shaikh
On Fri, Sep 16, 2022 at 3:46 PM Jochem Sparla <J.Sparla@iolan.com> wrote:
In DaloRADIUS, did you try to add a single MAC Address through the 'New User' and then 'MAC Address Authentication' option? Does that work?
I have used FreeRADIUS + DaloRADIUS with MAC based authentication, without any special modifications in the FreeRADIUS config for MAC based authentication.
Regards, Jochem
IOLAN B.V. • Mon Plaisir 26 • 4879 AN Etten-Leur • The Netherlands T +31 (0)76 50 26 100 • F +31 (0)76 50 26 199 E iolan@iolan.com • I https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.iolan.com%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pHUNzWm2B6mqqSnZa3YIWK3YHAFg1hDnEBiRRvBKprs%3D&reserved=0
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents here in and notify the sender immediately by return e-mail.
-----Oorspronkelijk bericht----- Van: Freeradius-Users [mailto:freeradius-users-bounces+j.sparla= iolan.com@lists.freeradius.org] Namens Ashfaque Shaikh Verzonden: vrijdag 16 september 2022 11:48 Aan: Freeradius-Users@lists.freeradius.org Onderwerp: Mac Authentication
Hi Team,
Recently I have installed free radius server with daloradius GUI. I am trying to configure mac based authentication and for this I have added MAC address on daloradius server GUI in colon format. Now the problem I am facing is when my access point is sending MAC request to freeradius server it's getting rejected. When I am checking the debug logs in username MAC address is showing in plain format like 00224DD1042B this. Can anyone please help how I can achieve this mac authentication?
Best Regards, Ashfaque Shaikh
-- IDfy is recognized as one of Asia's Top 5 companies in ID verification, KYC and employee background screening. Join us < https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fjob-openings%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=iUvSPTiLgDNYNbO2VRYQNMfjm7KZeD9Im3S6kC71%2F7w%3D&reserved=0>!<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fjob-openings%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=iUvSPTiLgDNYNbO2VRYQNMfjm7KZeD9Im3S6kC71%2F7w%3D&reserved=0%3e!> *Corporate / Registered Office* 8th Floor, Skyline Icon, Andheri – Kurla Road, Chimatpada, Marol, Andheri East, Mumbai MH 400059 IN Website <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=%2B8u9imcLv3acxEQHljzLTBEbTV7GwBidLvU3yiba0gk%3D&reserved=0> | LinkedIn < https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pd4eYlzTER6OqmxBNg6pjWHwP9md2wwuBSBpL30B3b0%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pd4eYlzTER6OqmxBNg6pjWHwP9md2wwuBSBpL30B3b0%3D&reserved=0%3e> | Instagram < https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fwe.are.idfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=H0K72b41LrkLlCFSei97ifVjmeH5xaJDSy6arls%2BfMI%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fwe.are.idfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=H0K72b41LrkLlCFSei97ifVjmeH5xaJDSy6arls%2BfMI%3D&reserved=0%3e> | Blog <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fblog%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=NJ8PGM8nDURK9xTKJgzdq7%2BLTeQbFxIomv5%2B56%2BN7Es%3D&reserved=0> | Contact Us <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fidfy-contact-us%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=Sd%2BdyEaDaLPRGY7t3DLwdfUI7E906EKQldfJ5LPLT0Q%3D&reserved=0> | Map < https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fg.page%2FIDfy-mumbai%3Fshare&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=2Bu3Hrt2MaiqEzWr1DAobr0EbCRUIxTMqIbcFLXo0Yo%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fg.page%2FIDfy-mumbai%3Fshare&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=2Bu3Hrt2MaiqEzWr1DAobr0EbCRUIxTMqIbcFLXo0Yo%3D&reserved=0%3e> *CIN* U74900MH2011PTC291275
This message (including any attachments hereto) is confidential and is intended solely for the addressee. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this message in error, you are requested to delete it from your system and to contact the sender by replying to this message immediately. Baldor Technologies Private Limited is not liable for the improper transmission of this message nor for any damage sustained as a result of this message.
- List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=T4vjCLanMeRz9EARiodxhhSo9mknN8%2Fxg%2Bz%2Fma6%2F%2FQI%3D&reserved=0 - List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=T4vjCLanMeRz9EARiodxhhSo9mknN8%2Fxg%2Bz%2Fma6%2F%2FQI%3D&reserved=0
-- IDfy is recognized as one of Asia's Top 5 companies in ID verification, KYC and employee background screening. Join us <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fjob-openings%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=iUvSPTiLgDNYNbO2VRYQNMfjm7KZeD9Im3S6kC71%2F7w%3D&reserved=0>! *Corporate / Registered Office* 8th Floor, Skyline Icon, Andheri – Kurla Road, Chimatpada, Marol, Andheri East, Mumbai MH 400059 IN Website <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=%2B8u9imcLv3acxEQHljzLTBEbTV7GwBidLvU3yiba0gk%3D&reserved=0> | LinkedIn <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pd4eYlzTER6OqmxBNg6pjWHwP9md2wwuBSBpL30B3b0%3D&reserved=0> | Instagram <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fwe.are.idfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=H0K72b41LrkLlCFSei97ifVjmeH5xaJDSy6arls%2BfMI%3D&reserved=0> | Blog <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fblog%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=NJ8PGM8nDURK9xTKJgzdq7%2BLTeQbFxIomv5%2B56%2BN7Es%3D&reserved=0> | Contact Us <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fidfy-contact-us%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=Sd%2BdyEaDaLPRGY7t3DLwdfUI7E906EKQldfJ5LPLT0Q%3D&reserved=0> | Map <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fg.page%2FIDfy-mumbai%3Fshare&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=2Bu3Hrt2MaiqEzWr1DAobr0EbCRUIxTMqIbcFLXo0Yo%3D&reserved=0> *CIN* U74900MH2011PTC291275
This message (including any attachments hereto) is confidential and is intended solely for the addressee. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this message in error, you are requested to delete it from your system and to contact the sender by replying to this message immediately. Baldor Technologies Private Limited is not liable for the improper transmission of this message nor for any damage sustained as a result of this message.
- List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600785349%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=gOi8nYM8NxfuikJHSD%2B3oov7NhEIPZ3FNDvRjxpHmbc%3D&reserved=0 -------------------------------------------------------------------- This email is from an external source. Please do not open attachments or click links from an unknown or suspicious origin. Phishing attempts can be reported by using the report message button in Outlook or sending them as an attachment to phishing@sky.uk. Thank you -------------------------------------------------------------------- Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky Limited and Sky International AG and are used under licence.
Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075), Sky Subscribers Services Limited (Registration No. 2340150) and Sky CP Limited (Registration No. 9513259) are direct or indirect subsidiaries of Sky Limited (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Mit freundlichen Grüßen, -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein