Does Freeradius support RFC 3576 (dynamic authorization)?
Hi, do recent (>= 2.1.12) versions have support for RFC 3576? The website makes some vague statement about being "compatible" with it, but doesn't actually say whether it will *do* dynamic authorization. -Mike -- ---
On 17/01/2016, at 14:52, Michael Martinez <mwtzzz@gmail.com> wrote:
Hi, do recent (>= 2.1.12) versions have support for RFC 3576? The website makes some vague statement about being "compatible" with it, but doesn't actually say whether it will *do* dynamic authorization.
Sure. FreeRADIUS can send COA and disconnect requests. You’ll need to build the logic about when to do that yourself, of course. Check the originate-coa example. -- Nathan Ward
Michael Martinez [mwtzzz@gmail.com] wrote:
Hi, do recent (>= 2.1.12) versions have support for RFC 3576? The website makes some vague statement about being "compatible" with it, but doesn't actually say whether it will *do* dynamic authorization.
It can relay or originate CoA and Disconnect-Requests to statically defined NAS units, but not dynamically derived NAS addresses. Not sure how far back that goes but that's at least in 3.x. Of course you can always run an external script to do dynamic NAS addresses.
participants (3)
-
Brian Julin -
Michael Martinez -
Nathan Ward