I would like to have this easy configuration but this is not possible at the moment. Lazy = spend a lot of money... yes I am lazy... ;) tnt@kalik.net escreveu:
I can't possibly imagine that there can be any reason for not adding mac address as another user apart from being lazy.
Ivan Kalik Kalik Informatika ISP
Dana 16/12/2008, "Leigh Martell" <leigh.martell@gmail.com> piše:
I completely agree with you! I am still curious to why adding a user is not an option though. Hopefully we will be "enlightened" as to why it is not an option.
2008/12/15 <tnt@kalik.net>
To be fair, there probably is a way to create an unlang hack (are we going to advocate unlang auth now) that can tie up mac address from the user entry with the one in the mac auth request (regexp check if username is mac address; if it is see if there is such mac address in the database and force Auth-Type Accept; there was some mention of the password, but that can be sorted as well) without breaking everything else on the server.
But why? If you can create user entry and add mac address as an attribute value it requires minimal effort on user admin side to create an entry with mac address as username value at the same time. A simple additional insert. Even if it is a closed code solution that you can't change, you can always make two entries - one for the user as username and one with mac address as username.
Be honest, if your user admin application can't do what you want, should you:
- hack your radius server?
- hack your user admin application?
It is credit to the quality and flexibility of Freeradius that messing with the radius server comes up as an option at all.
Ivan Kalik Kalik Informatika ISP
Dana 15/12/2008, "Leigh Martell" <leigh.martell@gmail.com> piše:
Well thats not entirely true; you can create an association table(if thats the right term) which has id,username, mac and then edit your query with some joins and additional magic...I would not suggest this but it is possible just very messy. I would highly recommend doing this the traditional way...at least if you value your sanity ;-).
-- Leigh
On Mon, Dec 15, 2008 at 4:22 PM, <tnt@kalik.net> wrote:
In my case I can't look for MAC in Username field and I have to look
for
that mac in Value field. Hope that have a way to make this happens.
You don't seem to get the problem. You have set up your AP to do mac authentication. When you do that, mac address is sent in the username filed. If you don't want that, don't set your AP to do mac auth. Set it to do user authentication. When you are doung user auth, mac address should appear as Calling-Station-Id (should).
There is *nothing* you can do in freeradius that will make your AP do this. You have to configure the AP to do that.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Att, NATANIEL KLUG nata@cnett.com.br LEIA O DIA-A-DIA DO NATA http://nataklug.blogspot.com/ Cyber Nett - Internet Banda Larga www.cnett.com.br (42) 3635-2957 Rua Diogo Pinto, 1046, Centro Laranjeiras do Sul - PR Brasil - 85301-290 "... também os sábios possuem coraça~o tangível e podem, por vezes, usar da cie^ncia como meio de demonstrar impresso~es sentimentais de que muitos na~o os julgam suscetíveis." Visconde de Taunay