We have a problem with filtering users from a telco exchange that isn't sending us CallerID's. We have on-line account opening, and all new accounts have 5 hours access. Users with full CallerID's are easily stopped from abusing the system and using extra accounts. If the exchange isn't sending full Calling-Station-ID, but only 4 or 5 numbers we can filter the users by using hungroups: goodone Calling-Station-ID = 12345, User-Name = gooduser SQL-Group = dial (this will let that user connect) banthem Calling-Station-ID = 12345 SQL-Group = reject (this will stop all others) What can we do when NAS doesn't have any Calling-Station-ID to send? Ivan
tnt@kalik.co.yu wrote:
What can we do when NAS doesn't have any Calling-Station-ID to send?
Not much. You can't invent a Calling-Station-ID, so your only option is to come up with a solution that doesn't need Calling-Station-Id. If you can't come up with a solution, you'll have to live without it. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Thanks Alan. I was hoping that there was a way to test for NULL value. Ivan Dana 26/2/2007, "Alan DeKok" <aland@deployingradius.com> piše:
tnt@kalik.co.yu wrote:
What can we do when NAS doesn't have any Calling-Station-ID to send?
Not much. You can't invent a Calling-Station-ID, so your only option is to come up with a solution that doesn't need Calling-Station-Id.
If you can't come up with a solution, you'll have to live without it.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
tnt@kalik.co.yu wrote:
Thanks Alan.
I was hoping that there was a way to test for NULL value.
Yes... see "man users". It's documented. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Right. Operator !* is what I needed. Works fine now. Thanks for your help. Ivan Dana 26/2/2007, "Alan DeKok" <aland@deployingradius.com> piše:
tnt@kalik.co.yu wrote:
Thanks Alan.
I was hoping that there was a way to test for NULL value.
Yes... see "man users". It's documented.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
tnt＠kalik.co.yu