Re: Authenticate/Attributes based on NAS-IP-Address
Nick, Extend the MySQL schema and change the SQL queries in sql.conf to do what you want. You could extend by HuntGroup, NAS-IP, Client-IP, whatever. See my previous post to this list archived here: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16842.h tml Cheers, _Mike -----Original Message----- Message: 6 Date: Tue, 07 Jun 2005 19:20:28 -0700 From: N White <nwtech@tele-net.net> Subject: Re: Authenticate/Attributes based on NAS-IP-Address To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <42A655EC.7050009@tele-net.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Actually I already have two running FreeRADIUS servers with SQL. That isn't the hard part. The problem with your instructions is that I'm not using ippool to assign dynamic IPs, our NASes are doing that (Portmaster 2/3). I don't have a problem setting up static IPs either, as we have several Dial-Up users who need those also. The problem lies in that I want to use the RADIUS server for PPPoE authentication also. But I want to allow users who log in through PPPoE to also be able to log in regularly(Dial-Up), when their PPPoE isn't logged in. BUT, when they log in through PPPoE, I want them to be assigned a static IP, when they login via Portmasters/Dial-Up, then they don't get the static IP, they get a regular dynamic one. Basically if a user logs in through NAS1, they are assigned X attributes with dynamic IP, if they log in through NAS2, they are assigned Y attributes with a static IP. And all this needs to be done in MySQL, that way my own PHP frontend(which I intend to release GPL) can work with it. Also I think MySQL scales better. -Nick -- ------------------------ | Nick White | | Network Consultant | | http://www.edge9.net | | nwtech@tele-net.net | ------------------------
That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this. -Nick Mike Lampson wrote:
Nick,
Extend the MySQL schema and change the SQL queries in sql.conf to do what you want. You could extend by HuntGroup, NAS-IP, Client-IP, whatever. See my previous post to this list archived here:
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16842.h tml
Cheers,
_Mike
-----Original Message----- Message: 6 Date: Tue, 07 Jun 2005 19:20:28 -0700 From: N White <nwtech@tele-net.net> Subject: Re: Authenticate/Attributes based on NAS-IP-Address To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <42A655EC.7050009@tele-net.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Actually I already have two running FreeRADIUS servers with SQL. That isn't the hard part. The problem with your instructions is that I'm not using ippool to assign dynamic IPs, our NASes are doing that (Portmaster 2/3). I don't have a problem setting up static IPs either, as we have several Dial-Up users who need those also. The problem lies in that I want to use the RADIUS server for PPPoE authentication also. But I want to allow users who log in through PPPoE to also be able to log in regularly(Dial-Up), when their PPPoE isn't logged in. BUT, when they log in through PPPoE, I want them to be assigned a static IP, when they login via Portmasters/Dial-Up, then they don't get the static IP, they get a regular dynamic one. Basically if a user logs in through NAS1, they are assigned X attributes with dynamic IP, if they log in through NAS2, they are assigned Y attributes with a static IP. And all this needs to be done in MySQL, that way my own PHP frontend(which I intend to release GPL) can work with it. Also I think MySQL scales better.
-Nick
-- ------------------------ | Nick White | | Network Consultant | | http://www.edge9.net | | nwtech@tele-net.net | ------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________ NOD32 1.1133 (20050608) Information __________
This message was checked by NOD32 antivirus system. http://www.eset.com
-- ------------------------ | Nick White | | Network Consultant | | http://www.edge9.net | | nwtech@tele-net.net | ------------------------
nevermind, i added "tml" to it. haha. -Nick N White wrote:
That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this.
-Nick
Mike Lampson wrote:
Nick,
Extend the MySQL schema and change the SQL queries in sql.conf to do what you want. You could extend by HuntGroup, NAS-IP, Client-IP, whatever. See my previous post to this list archived here:
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16842.h
tml
Cheers,
_Mike
-----Original Message----- Message: 6 Date: Tue, 07 Jun 2005 19:20:28 -0700 From: N White <nwtech@tele-net.net> Subject: Re: Authenticate/Attributes based on NAS-IP-Address To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <42A655EC.7050009@tele-net.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Actually I already have two running FreeRADIUS servers with SQL. That isn't the hard part. The problem with your instructions is that I'm not using ippool to assign dynamic IPs, our NASes are doing that (Portmaster 2/3). I don't have a problem setting up static IPs either, as we have several Dial-Up users who need those also. The problem lies in that I want to use the RADIUS server for PPPoE authentication also. But I want to allow users who log in through PPPoE to also be able to log in regularly(Dial-Up), when their PPPoE isn't logged in. BUT, when they log in through PPPoE, I want them to be assigned a static IP, when they login via Portmasters/Dial-Up, then they don't get the static IP, they get a regular dynamic one. Basically if a user logs in through NAS1, they are assigned X attributes with dynamic IP, if they log in through NAS2, they are assigned Y attributes with a static IP. And all this needs to be done in MySQL, that way my own PHP frontend(which I intend to release GPL) can work with it. Also I think MySQL scales better.
-Nick
-- ------------------------ | Nick White | | Network Consultant | | http://www.edge9.net | | nwtech@tele-net.net | ------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________ NOD32 1.1133 (20050608) Information __________
This message was checked by NOD32 antivirus system. http://www.eset.com
-- ------------------------ | Nick White | | Network Consultant | | http://www.edge9.net | | nwtech@tele-net.net | ------------------------
On Wednesday 08 June 2005 15:54, N White wrote:
That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this.
-Nick
Mike Lampson wrote:
Nick,
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16842 .html
Pay attention to details. Take note that the the link wraps. You can't just blindly click it. You'll have to enter the .html manually. The link is good.
Zoltan A. Ori wrote:
On Wednesday 08 June 2005 15:54, N White wrote:
That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this.
-Nick
Mike Lampson wrote:
Nick,
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16842 .html
Pay attention to details. Take note that the the link wraps. You can't just blindly click it. You'll have to enter the .html manually. The link is good.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________ NOD32 1.1134 (20050608) Information __________
This message was checked by NOD32 antivirus system. http://www.eset.com
Already taken care of. -Nick -- ------------------------ | Nick White | | Network Consultant | | http://www.edge9.net | | nwtech@tele-net.net | ------------------------
participants (3)
-
Mike Lampson -
N White -
Zoltan A. Ori