stored procedure value for access-reject in free radius
Hi all, I want to configure the free radius to return access-reject based on the value in stored procedure in oracle database( i have configured oracle database to free radius) How do i do that ??? please help.... Lakshmi narayana | Prod Engineering | Tech Mahindra #9/7 Hosur Road,Bangalore-560029 /Office: +91 80 40243000, Extn: 3486 | Mobile: +91 9060867386 Email:lb0074453@techmahindra.com www.techmahindra.com ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================
On Tue, Feb 5, 2013 at 9:44 PM, Lakshmi Narayana Baliah <LB0074453@techmahindra.com> wrote:
Hi all,
I want to configure the free radius to return access-reject based on the value in stored procedure in oracle database( i have configured oracle database to free radius)
How do i do that ??? please help....
One way to do that is with unlang: http://freeradius.org/radiusd/man/unlang.html Hint: "if" block, "%{sql:...}", and "reject". Another way is to have radcheck db entry for that user, but with "Auth-Type := Reject" -- Fajar
On 05/02/13 10:44, Lakshmi Narayana Baliah wrote:
Hi all,
I want to configure the free radius to return access-reject based on the value in stored procedure in oracle database( i have configured oracle database to free radius)
How do i do that ??? please help....
There are many ways, it depends on exactly what you want to do. You are being too vague. One option is to use an SQL xlat in unlang, like so: authorize { ... update control { Tmp-String-0 := "%{sql: <sql to call proc goes here>}" } if (control:Tmp-String-0 == "reject") { reject } ... } The SQL inside the XLAT can reference packet values e.g. %{sql:select some_proc('%{User-Name}')}
participants (3)
-
Fajar A. Nugraha -
Lakshmi Narayana Baliah -
Phil Mayers