Pushing a policy for usergroup and calling station id from Free Radius Server
Hi, I am using free radius on Linux, Fedora 13. I am able to push policy for a user.. I need help on two scenarios given below. 1.how to push policy for a specific usergroup from free radius sever 2. how to push a policy for a specific Calling-Station-ID like 00:16:6F:A2:XX:XX [ no user specific policy returned] Thanks in advance. Regards, Subhani
On Sun, Sep 30, 2012 at 4:53 PM, Subhani sk m <subhani19.cool@gmail.com> wrote:
Hi,
I am using free radius on Linux, Fedora 13. I am able to push policy for a user.. I need help on two scenarios given below.
1.how to push policy for a specific usergroup from free radius sever
Depends on what you mean by "push policy". If it's just "return some radius attribute"), then if you use database, simply put it on radgroupreply table. See the included documentation, or http://wiki.freeradius.org/modules/Rlm_sql
2. how to push a policy for a specific Calling-Station-ID like 00:16:6F:A2:XX:XX [ no user specific policy returned]
Short version? Use unlang (http://freeradius.org/radiusd/man/unlang.html) -- Fajar
Thanks Fajar. In previous mail, "Push Policy" means Radius Attribute only. I am using EAP-TLS and When a client sends a radius request with username "user1" to radius server. In access accept I am able to see attributes configured in users file being returned. In */etc/raddb/users* file *user1 Cleartext-Password := "user1"* * Tunnel-Type := 13, Tunnel-Medium-Type := 6, Tunnel-Private-Group-Id := "guest", * * LVL7-Wireless-Client-Policy-Dn := "policy1"*, Similarly for a usergroup say "usergroup1" I should send radius attributes.. Also with client Mac which can be seen in radius request as calling station id. Can we do it from modifying config files instead of modifying sql database? Regards, Subhani On Sun, Sep 30, 2012 at 4:35 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sun, Sep 30, 2012 at 4:53 PM, Subhani sk m <subhani19.cool@gmail.com> wrote:
Hi,
I am using free radius on Linux, Fedora 13. I am able to push policy for a user.. I need help on two scenarios given below.
1.how to push policy for a specific usergroup from free radius sever
Depends on what you mean by "push policy". If it's just "return some radius attribute"), then if you use database, simply put it on radgroupreply table. See the included documentation, or http://wiki.freeradius.org/modules/Rlm_sql
2. how to push a policy for a specific Calling-Station-ID like 00:16:6F:A2:XX:XX [ no user specific policy returned]
Short version? Use unlang (http://freeradius.org/radiusd/man/unlang.html)
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sun, Sep 30, 2012 at 7:51 PM, Subhani sk m <subhani19.cool@gmail.com> wrote:
Thanks Fajar.
In previous mail, "Push Policy" means Radius Attribute only. I am using EAP-TLS and When a client sends a radius request with username "user1" to radius server. In access accept I am able to see attributes configured in users file being returned.
In /etc/raddb/users file user1 Cleartext-Password := "user1" Tunnel-Type := 13, Tunnel-Medium-Type := 6, Tunnel-Private-Group-Id := "guest", LVL7-Wireless-Client-Policy-Dn := "policy1",
Similarly for a usergroup say "usergroup1" I should send radius attributes.. Also with client Mac which can be seen in radius request as calling station id.
Can we do it from modifying config files instead of modifying sql database?
Should be possible. Though I have never tried using group from users file, so you'd probably need to try it out yourself, or wait and see if others have better example/advice. -- Fajar
participants (2)
-
Fajar A. Nugraha -
Subhani sk m