FreeRADIUS & MAC authentication
Greetings FreeRADIUS List i have a special requirement, i need your help to understand FreeRADIUS virtual server(s) a little bit. i want to use FreeRADIUS for MAC authentication and i need the following results. if not found then accept the access if found look for accept & reject value in the database table to send reply. My question is not that how to do it, but to know if do able. i shall read more documentation if possible to achieve. i would VERY grateful also, if someone can kindly send me the documentation link, which explain this kind of topic. Thanks / Regards RM --
Russell Mike wrote:
i have a special requirement, i need your help to understand FreeRADIUS virtual server(s) a little bit. i want to use FreeRADIUS for MAC authentication and i need the following results.
if not found then accept the access if found look for accept & reject value in the database table to send reply.
That's possible.
My question is not that how to do it, but to know if do able. i shall read more documentation if possible to achieve. i would VERY grateful also, if someone can kindly send me the documentation link, which explain this kind of topic.
Go to http://wiki.freeradius.org/ Type in "mac auth" into the search bar. Click on the obvious link. PLEASE check the wiki. It's not hard. Alan DeKok.
Very Very happy to hear that it is do able. i can only express my gratitude by saying, you guys are great, everything is there for us. Thanks / Thanks RM -- On Tue, Apr 29, 2014 at 1:41 PM, Alan DeKok <aland@deployingradius.com>wrote:
Russell Mike wrote:
i have a special requirement, i need your help to understand FreeRADIUS virtual server(s) a little bit. i want to use FreeRADIUS for MAC authentication and i need the following results.
if not found then accept the access if found look for accept & reject value in the database table to send reply.
That's possible.
My question is not that how to do it, but to know if do able. i shall read more documentation if possible to achieve. i would VERY grateful also, if someone can kindly send me the documentation link, which explain this kind of topic.
Go to http://wiki.freeradius.org/
Type in "mac auth" into the search bar.
Click on the obvious link.
PLEASE check the wiki. It's not hard.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, Apr 29, 2014 at 1:41 PM, Alan DeKok <aland@deployingradius.com>wrote:
Russell Mike wrote:
i have a special requirement, i need your help to understand FreeRADIUS virtual server(s) a little bit. i want to use FreeRADIUS for MAC authentication and i need the following results.
if not found then accept the access if found look for accept & reject value in the database table to send reply.
That's possible.
My question is not that how to do it, but to know if do able. i shall read more documentation if possible to achieve. i would VERY grateful also, if someone can kindly send me the documentation link, which explain this kind of topic.
Go to http://wiki.freeradius.org/
Type in "mac auth" into the search bar.
Click on the obvious link.
PLEASE check the wiki. It's not hard.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
authorize { authorized_macs # if not found accept access if (!ok) { accept # Here I also want to say that if record found, look for accept and reject field in DB. i need little help } else { update control { Auth-Type := Accept } } } it seems to be little tricky for me, once i have already said, accept if record NOT found. how can i say again look for (accept/reject) entry if record found. Thanks / Regards RM --
Russell Mike wrote:
authorize {
authorized_macs
# if not found accept access
if (!ok) {
accept
You can't just put "accept" into the configuration file.
# Here I also want to say that if record found, look for accept and reject field in DB. i need little help
What do you mean by that? What are the "accept and reject fields"? You have an idea as to what you want to do. But you're explaining it using the idea itself... "I want to do stuff with stuff". Well... that's not helpful.
it seems to be little tricky for me, once i have already said, accept if record NOT found.
The example in the Wiki shows how to force Auth-Type = Accept. Use that.
how can i say again look for (accept/reject) entry if record found.
Look for accept/reject WHERE? If you want to put accept/reject into the authorized_macs file... just do that. Add another field to the file. Do this by using a text editor. Then, edit the "authorized_macs" module definition to add that field. All of this is documented in detail. Alan DeKok.
Dear Alan Thanks once again, you are right. i was thinking complex rather. if mac address found in database, FreeRADIUS will send accept. if NOT found, following will force to accept. authorize { authorized_macs *# if not found accept access* if (!ok) { accept } update control { Auth-Type := Accept } } i think this is what i want. does this unlang look correct to you ? Thanks / Regards On Wed, Apr 30, 2014 at 3:21 PM, Alan DeKok <aland@deployingradius.com>wrote:
Russell Mike wrote:
authorize {
authorized_macs
# if not found accept access
if (!ok) {
accept
You can't just put "accept" into the configuration file.
# Here I also want to say that if record found, look for accept and reject field in DB. i need little help
What do you mean by that? What are the "accept and reject fields"?
You have an idea as to what you want to do. But you're explaining it using the idea itself... "I want to do stuff with stuff". Well... that's not helpful.
it seems to be little tricky for me, once i have already said, accept if record NOT found.
The example in the Wiki shows how to force Auth-Type = Accept. Use that.
how can i say again look for (accept/reject) entry if record found.
Look for accept/reject WHERE?
If you want to put accept/reject into the authorized_macs file... just do that. Add another field to the file. Do this by using a text editor. Then, edit the "authorized_macs" module definition to add that field.
All of this is documented in detail.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Russell Mike