Thinking this over I may have thought of a solution, but if anyone can suggest something better let me know... I write another SQL module call it sql_ppp and change the query so that it omits any records with an attribute == Calling-Station-Id, and the use unlang to call that module when Service-Type == PPP. Unless there's a way to use unlang to strip the check item, i don't know how else to accomplish this. Sincerely, William Burnett burnett.w@gmail.com On Fri, Oct 15, 2010 at 4:21 PM, William Burnett <burnett.w@gmail.com> wrote:

Hello all..

I'm trying to setup my Radius server so that it will map MAC addresses to TTLS user/pass for 802.1x. I have that part working fine. The problem is, the same user/pass pair I'm also using for the clients PPPoE authentication.

I want the Calling-Station-Id to be verified when an EAP/TTLS session is being authenticated, but I don't want to check the Calling-Station-Id when the PPPoE session is authenticating. This is because the TTLS device is known and controlled by me, the PPPoE device may be any MAC address that I don't want to have to maintain a list of.

My question is, using unlang is there an option do delete a check item attribute based on another attribute?

IE:

if (Framed-Protocol == PPP) {            update-control {                                     Calling-Station-Id !*  # Not sure if I'm using the !* operator properly here                                  }                                }

That code just yields errors, but thats essentially what I'm trying to do...

Sincerely,

William Burnett burnett.w@gmail.com