I'm trying to solve a design issue and wonder if anyone has done something similar with hotspots. I would like to send back different values in the VSAs when a user logs in from one calledStationID vs another. For example. User joe logs in from hotspot1. the calledStationID is sent. FreeRADIUS takes that and sends back the local DNS server IP address (or whatever is specific to that region) instead of the one tied to, say, hotspot100. The goal is to allow me to setup different regions in FreeRADIUS with region-specific parameters. I had some things that I thought would work, but I'm wondering how others have solved this problem. Jeffrey
users file: DEFAULT Called-Station-Id == "hotspot1" reply 1, reply 2, ... DEFAULT Called-Station-Id == "hotspot100" reply 1, reply 2, ... Ivan Kalik Kalik Informatika ISP Dana 27/7/2007, "Jeffrey Sewell" <jeffrey.sewell@gmail.com> piše:
I'm trying to solve a design issue and wonder if anyone has done something similar with hotspots. I would like to send back different values in the VSAs when a user logs in from one calledStationID vs another.
For example. User joe logs in from hotspot1. the calledStationID is sent. FreeRADIUS takes that and sends back the local DNS server IP address (or whatever is specific to that region) instead of the one tied to, say, hotspot100.
The goal is to allow me to setup different regions in FreeRADIUS with region-specific parameters.
I had some things that I thought would work, but I'm wondering how others have solved this problem.
Jeffrey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Could the same thing apply if I'm using MySQL instead of the users file? Maybe a separate sql query based on calledStationID? On 7/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
users file:
DEFAULT Called-Station-Id == "hotspot1" reply 1, reply 2, ...
DEFAULT Called-Station-Id == "hotspot100" reply 1, reply 2, ...
Ivan Kalik Kalik Informatika ISP
Dana 27/7/2007, "Jeffrey Sewell" <jeffrey.sewell@gmail.com> piše:
I'm trying to solve a design issue and wonder if anyone has done something similar with hotspots. I would like to send back different values in the VSAs when a user logs in from one calledStationID vs another.
For example. User joe logs in from hotspot1. the calledStationID is sent. FreeRADIUS takes that and sends back the local DNS server IP address (or whatever is specific to that region) instead of the one tied to, say, hotspot100.
The goal is to allow me to setup different regions in FreeRADIUS with region-specific parameters.
I had some things that I thought would work, but I'm wondering how others have solved this problem.
Jeffrey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You could add CalledStationId field to the radgroupreply table and modify authorize_group_reply_query to check that that field is equal to %{Called-Station-Id}. Ivan Kalik Kalik Informatika ISP Dana 27/7/2007, "Jeffrey Sewell" <jeffrey.sewell@gmail.com> piše:
Could the same thing apply if I'm using MySQL instead of the users file? Maybe a separate sql query based on calledStationID?
On 7/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
users file:
DEFAULT Called-Station-Id == "hotspot1" reply 1, reply 2, ...
DEFAULT Called-Station-Id == "hotspot100" reply 1, reply 2, ...
Ivan Kalik Kalik Informatika ISP
Dana 27/7/2007, "Jeffrey Sewell" <jeffrey.sewell@gmail.com> pi�e:
I'm trying to solve a design issue and wonder if anyone has done something similar with hotspots. I would like to send back different values in the VSAs when a user logs in from one calledStationID vs another.
For example. User joe logs in from hotspot1. the calledStationID is sent. FreeRADIUS takes that and sends back the local DNS server IP address (or whatever is specific to that region) instead of the one tied to, say, hotspot100.
The goal is to allow me to setup different regions in FreeRADIUS with region-specific parameters.
I had some things that I thought would work, but I'm wondering how others have solved this problem.
Jeffrey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 7/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
You could add CalledStationId field to the radgroupreply table and modify authorize_group_reply_query to check that that field is equal to %{Called-Station-Id}.
Ivan Kalik Kalik Informatika ISP
I like this idea a lot. I know that I can create more than one SQL query for different scenarios (sql1, sql2, etc). What other capabilities do I have with this conf file? For example, can I do an "if-then-else" with queries? Thinking to check first that the Called-Station-Id matches what the user is allowed, if so, do the regular auth query, if not do a different query to give that user limited access (say to a "would you like to buy roaming" page).
On 7/30/07, Jeffrey Sewell <jeffrey.sewell@gmail.com> wrote:
On 7/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
You could add CalledStationId field to the radgroupreply table and modify authorize_group_reply_query to check that that field is equal to %{Called-Station-Id}.
After posting my last reply/question, I was re-reading the rlm_sql wiki section on SQL xlat and found that little note on version 2's use of conditionals! :) Looks like that was designed to do exactly what I'm thinking. I haven't been following the threads on version 2's status, how is it coming? Anything I can do to help?
On Mon 30 Jul 2007, Jeffrey Sewell wrote:
On 7/30/07, Jeffrey Sewell <jeffrey.sewell@gmail.com> wrote:
On 7/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
You could add CalledStationId field to the radgroupreply table and modify authorize_group_reply_query to check that that field is equal to %{Called-Station-Id}.
After posting my last reply/question, I was re-reading the rlm_sql wiki section on SQL xlat and found that little note on version 2's use of conditionals! :)
Looks like that was designed to do exactly what I'm thinking. I haven't been following the threads on version 2's status, how is it coming? Anything I can do to help?
The best thing you can do right now is test current cvs HEAD and report any bugs to us! Hopefully we can get a 2.0 release (or at least another prerelease) out the door soon. -- Peter Nixon http://peternixon.net/
Jeffrey Sewell wrote:
Looks like that was designed to do exactly what I'm thinking. I haven't been following the threads on version 2's status, how is it coming? Anything I can do to help?
There are one or two patches that I think should go into CVS. After that, we can release 2.0.0-pre2. Maybe this week, maybe next week. Alan DeKok.
participants (4)
-
Alan DeKok -
Jeffrey Sewell -
Peter Nixon -
tnt＠kalik.co.yu