Thanks a lot! Atenciosamente, RENAN DE SOUZA RODRIGUES Open Source Enthusiastic Computational Physicist Linux Professional Level 2 Centro de Computação Meteorológica de Alto Desempenho Coordenação-Geral de Modelagem Numérica Tel: (61)2102-4728 (61)9220-6016 INMET Instituto Nacional de Meteorologia Eixo Monumental Via S1 Sudoeste Brasília-DF Slackware user: - Safely Work! - Safely Guard! On Wed, May 29, 2013 at 2:52 PM, Alan DeKok <aland@deployingradius.com>wrote:
Renan Rodrigues wrote:
There is something I am trying to do with radius and can't find how. (One month googling and nothing done...) What I want is to authenticate my users with their MAC and IP-ADDRESS, so, even if they have root-access to their systems, they can't change their IP-ADDRESS by themselves, because radius is going to reject then.
Until now, I have a radius mac-authenticating and working together with dhcpd. I've tried to use ip-pool, that works, but someone still can change ip-address by hand and keep networking....
So, it is possible to work this out?
No.
The IP address doesn't come in the Access-Request. So you can't enforce it.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html