Pb with Mac and EAP auth
Hi, Im using Freeradius for both Mac and WPA authentication (EAP-TTLS) of my WiFi users, and im facing a trouble I have no idea how to solve : In my users file Ive set a list of the mac address like this : # Portable MACHIN "001122334455" Auth-Type := Accept Cisco-AVpair := "ssid=Machin", Cisco-AVpair += "ssid=Machin2" And for users a password crypt file filecrypt DEFAULT Autz-Type := filecrypt The problem is that when doing EAP-TTLS authentication if I set the mac address of one of the allowed card as the login name I am authenticated!!! Is there a way to prevent this somehow? To specify that Auth-Type:=Accept is only for non EAP authentication ??? Thanks for help Benoît Bianchi <mailto:benoit.bianchi@cri.uvsq.fr> .
=?iso-8859-1?Q?Beno=EEt_Bianchi?= <benoit.bianchi@cri.uvsq.fr> wrote:
In my users file I=92ve set a list of the mac address like this :
...
"001122334455" Auth-Type := Accept
Anyone logging in with that username will get accepted.
The problem is that when doing EAP-TTLS authentication if I set the mac address of one of the allowed card as the login name I am authenticated!!!
That's what you told it to do. But it's still a bad idea.
Is there a way to prevent this somehow? To specify that Auth-Type:=Accept is only for non EAP authentication ???
Yes. Read the "man" page for the "users" file. See the !* operator. Alan DeKok.
participants (2)
-
Alan DeKok -
Benoît Bianchi