Hi Herwin, We have our own mpls network. Set top boxes use pppoe to login to our network. We have some boxes which doesn't have pppoe support. For them we are looking for some authentication mechanism. So if it can be done via a respt api to the same radius database, it would solve our problem. Please share your suggestions. Best Regards, Randeep On Tue, Sep 1, 2015 at 3:55 PM, Herwin Weststrate <herwin@quarantainenet.nl> wrote:

On 31-08-15 09:15, Randeep wrote:

...

Hi Alan,

We have two types of IPTV boxes. One has pppoe support and other one doesn't have pppoe support.

We are using FreeRadius 3.0.8 for authentication.

I remember you mentioning that authentication can be done via a rest api also. So we can use this api for authentication for the device which doesn't have the pppoe support.

I think you've got a few things mixed up here. The rest module is just a module that can run in different sections by calling an external process/server via a RESTful API to do something. The added demo.pl adds a Cleartext-Password := testing123 to the control map, this could be used in the authorize section of a server, where for example the pap module could compare the passwords in authenticate section. A bit comparable to a lookup in a database to find the plaintext password.

I've really got no idea how this would be related to iptv boxes that don't use pppoe. To me this sounds a bit like you heard about a concept and now try to retrofit that concept to some completely unrelated problem.

-- Herwin Weststrate

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Randeep Mob: +919447831699[kerala] Mob: +919880050349[B'lore] http://twitter.com/Randeeppr http://in.linkedin.com/in/randeeppr [image: --] Randeep Raman [image: http://]about.me/Randeeppr <http://about.me/Randeeppr>

Thanks Herwin, What I understand from here is we need to write all the logic and codes required in the rest api service(in whichever language we are writing it). But we already have one Radius server with all the logics and configurations. We are using mikrotik NAS. It has hotspot service also. Is it possible we can use hotpost for authentication via API? Regards, Randeep On Wed, Sep 2, 2015 at 12:40 PM, Herwin Weststrate <herwin@quarantainenet.nl

wrote:

On 01-09-15 12:53, Randeep wrote:

...

Hi Herwin,

We have our own mpls network. Set top boxes use pppoe to login to our network.

We have some boxes which doesn't have pppoe support. For them we are looking for some authentication mechanism. So if it can be done via a respt api to the same radius database, it would solve our problem.

That would be possible, but keep in mind that rest only provides a transport mechanism, all the logic still has to be built in the server that provides the rest service. You can compare it to the exec module, it can only execute a program, the logic to make decisions here should go into that program, not in the module itself. If you literally mean database, the sql modules would be a far better choice.

Theres is a demo.pl included with the source. That, along with the config example are pretty clear on how to configure the rest module (even though they don't work together out of the box). If that is complete gibberish to you, than I don't think the rest module is suitable for you.

-- Herwin Weststrate

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Randeep Mob: +919447831699[kerala] Mob: +919880050349[B'lore] http://twitter.com/Randeeppr http://in.linkedin.com/in/randeeppr [image: --] Randeep Raman [image: http://]about.me/Randeeppr <http://about.me/Randeeppr>