Authenticating access via caller-id or username/password
Good Day, I've an interesting question. I currently authenticate users via caller-id for a static ip delivery system. I have had to change the "sql_user_name" to the "calling-station-id" attribute so that i can match the entries to so called usernames in the MYSQL database This is working and works well as the username for authentication ends up being the caller id. I now have to authenticate users based on username and password in one instance and solely calling-station-id in another. the config i use in the "files" to authenticate a user on caller id is as follows: DEFAULT Calling-Station-ID =="1234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.21 DEFAULT Calling-Station-ID =="2234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.22 DEFAULT Calling-Station-ID =="3234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.23 DEFAULT Calling-Station-ID =="4234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.24 the DEFAULT section has the framing types etc set. How would i now do this in the MYSQL database as there is no way of tying the "username" to anything ? Regards John
I now have to authenticate users based on username and password in one instance
That's easy, but ...
and solely calling-station-id in another.
... what does that mean? Each user can call from a specific callerID? Each user can call from a specific list of callerIDs? Every user can call from a list of (all) known callerIDs? Solution will depend on the policy. Ivan Kalik Kalik Informatika ISP
Hi There, the authentication will take place based only on the calling station id. in one scenario: the users use usernames and passwords. in the second scenario, a device is authenticated on the calling-station-id as it has no username or password. the device is put into a different part of the network. i was thinking of this: sql_user_name = "%{User-Name:-%{Calling-Station-Id:-DENY}}" the problem is that the NAS returns "VOID" as the username if its left blank. seeing as i have to tie the username to something usefull to make a select statement i guess i'm looking for a method to put the calling station id into the username field if the username is "VOID" where would the best place for that be and how could it be done? I see some nifty UNLANG examples but none that work on run time substitutions. Regards John On Tue, Oct 13, 2009 at 3:54 PM, Ivan Kalik <tnt@kalik.net> wrote:
I now have to authenticate users based on username and password in one instance
That's easy, but ...
and solely calling-station-id in another.
... what does that mean? Each user can call from a specific callerID? Each user can call from a specific list of callerIDs? Every user can call from a list of (all) known callerIDs? Solution will depend on the policy.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Ivan Kalik -
John Ward