Lots and lots of elseifs in sites-enabled/default
I'm working on setting up a radius environment for wifi authentication with an LDAP backend. It is a multi-location deal and I'm going to have over 500 different SSIDs each requiring different LDAP attributes to match. So, there will be a long list something like the below. Anybody think that is going to cause significant delays or make freeradius poop itself? post-auth { ldap.authorize if ( Called-Station-Id =~ /AC-86-74-76-21-.*:SSID1/ && reply:My-Local-String == "140599" ) { noop } elsif ( Called-Station-Id =~ /AC-86-74-90-AD-.*:SSID2/ && reply:My-Local-String == "330492" ) { noop } .....Repeat 500 times else { reject }
On Sep 7, 2016, at 11:10 AM, Clayton Knorr <clayton.knorr@nuspire.com> wrote:
I'm working on setting up a radius environment for wifi authentication with an LDAP backend. It is a multi-location deal and I'm going to have over 500 different SSIDs each requiring different LDAP attributes to match. So, there will be a long list something like the below. Anybody think that is going to cause significant delays or make freeradius poop itself?
It's not a good idea. This is what databases are for. Parse the Called-Station-Id into fields. Then, look up the fields in a database. Alan DeKok.
Hi,
I'm working on setting up a radius environment for wifi authentication with an LDAP backend. It is a multi-location deal and I'm going to have over 500 different SSIDs each requiring different LDAP attributes to match. So, there will be a long list something like the below. Anybody think that is going to cause significant delays or make freeradius poop itself?
post-auth {
ldap.authorize if ( Called-Station-Id =~ /AC-86-74-76-21-.*:SSID1/ && reply:My-Local-String == "140599" ) { noop } elsif ( Called-Station-Id =~ /AC-86-74-90-AD-.*:SSID2/ && reply:My-Local-String == "330492" ) { noop } .....Repeat 500 times else { reject }
my opinion? use a DB for the Called-Station-Id/SSId/My-Local-String check. alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Clayton Knorr