Mac address rejecting
o.k. Found a thread about sending access rejects if a mac address is in a file, so, on FR 3.0.12 I did passwd rejectmac { filename = ${confdir}/rejectmac delimiter = , format = "*Calling-Station-Id" } put AA-BB-CC-DD-EE-FF in /etc/freeradius/rejectmac, new line at end Edited /etc/sites-enabled/default to have if(Calling-Station-Id) { # if ("%{sql:SELECT count(*) from mac_addresses where mac_address='%{Calling-Station-Id}'and device_type=26}" > 0) { rejectmac if(ok){ update control { &Auth-Type := Reject } update reply { &Reply-Message := "quarantined, contact ITSO" } } } # ...... and everything gets rejected! remove everything from /etc/freeradius/rejectmac ...... and still things get rejected.
On Oct 19, 2016, at 12:02 PM, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
o.k. Found a thread about sending access rejects if a mac address is in a file, so, on FR 3.0.12 I did
passwd rejectmac { filename = ${confdir}/rejectmac delimiter = , format = "*Calling-Station-Id" }
...
...... and everything gets rejected!
Someone edited the rlm_passwd module in 3.0, and removed the code which returned "notfound" when nothing was found. I've pushed a fix, but you'll have to grab the v3.0.x branch from git. Alan DeKok.
That's not a problem Thx A Sent from my iPhone 6 plus
On 19 Oct 2016, at 18:55, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 19, 2016, at 12:02 PM, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
o.k. Found a thread about sending access rejects if a mac address is in a file, so, on FR 3.0.12 I did
passwd rejectmac { filename = ${confdir}/rejectmac delimiter = , format = "*Calling-Station-Id" } ... ...... and everything gets rejected!
Someone edited the rlm_passwd module in 3.0, and removed the code which returned "notfound" when nothing was found.
I've pushed a fix, but you'll have to grab the v3.0.x branch from git.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
and that worked thanks alex On 19 October 2016 at 19:15, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
That's not a problem Thx A
Sent from my iPhone 6 plus
On 19 Oct 2016, at 18:55, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 19, 2016, at 12:02 PM, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
o.k. Found a thread about sending access rejects if a mac address is in a file, so, on FR 3.0.12 I did
passwd rejectmac { filename = ${confdir}/rejectmac delimiter = , format = "*Calling-Station-Id" } ... ...... and everything gets rejected!
Someone edited the rlm_passwd module in 3.0, and removed the code which returned "notfound" when nothing was found.
I've pushed a fix, but you'll have to grab the v3.0.x branch from git.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
participants (2)
-
Alan DeKok -
Alex Sharaz