Assign Vlan based on Inner Identity (was: Force Inner=Outer identity)

Matt Ashfield mda at unb.ca
Thu May 3 19:48:23 CEST 2007


Hi All
I doubt my original post was doable, , it probably doesn't make sense to ask
FR to be able to force Inner=Outer identity.

In that case, would it be possible to perform authorization based on the
Inner identity instead of the Outer identity?

Matt 
mda at unb.ca 


-----Original Message-----
From: freeradius-users-bounces+mda=unb.ca at lists.freeradius.org
[mailto:freeradius-users-bounces+mda=unb.ca at lists.freeradius.org] On Behalf
Of Matt Ashfield
Sent: May 2, 2007 11:29 AM
To: 'FreeRadius users mailing list'
Subject: Force Inner=Outer identity

Hi All

Using EAP-TTLS PAP with FR authenticated against LDAP. In looking at our
monitoring software, it displays the user's outer identity. Problem is, a
user can specify any userID as it's outer Identity and as long as it's a
valid outer Identity, that's what shows up in our monitoring software. Makes
user tracking quite difficult.

Is there any way to force a users's outer identity to equal their inner
identity? 

Thanks

Matt Ashfield
mda at unb.ca 




- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list