Rejecting User By their Calling-Station-Id (Mac Address)

[Alex M]

Well i guess i'm back to my problem :(
I tried group thing and i'm  getting som strange un-constant results :(

Can some one tell me how the logic works for groupcheck?

If I have Calling-Station-Id and reply reject spesified for the same user
what should happen? what if i have 100 MAC addressed entered how do we check
for that?

I had 1 MAC address entered and geting rejected well. If 1 MAC is entered
but not my MAC then im not getting rejected, yet when 2 Mac addresses
entered im geting rejected regardless of my mac address. (My ban group has
priority of 1)

I would love to solve my problem w/ groups so I don't have to edit radius
xinfig files,,, but if im geting this trange results or if its not possible
i'm more or less ok w. adding more settings to configs...


Thanks for helping me out!





On Tue, Dec 15, 2009 at 2:41 PM, Alex M <freeradius at lrcommunications.net>wrote:

> wow... i managed to make it work w/ groups but i like your way better =)
> Thank you!
>
>
> On Tue, Dec 15, 2009 at 2:36 AM, Alan DeKok <aland at deployingradius.com>wrote:
>
>> Alex M wrote:
>> > Hey all, i'm coming back here w/ my old question of how to reject users
>> > based on their MAC address... but now im running FR 2.x.x
>> >
>> > So, we have trial access for free, and some people figured that they can
>> > re-register new accounts for trial all over again and have fun this way.
>> > Well thats not fun for us so we trying to figure out what we can do to
>> > reject reqyest from their machines no matter what name they put in. So
>> > maybe some one can help me out here.
>>
>>   Create a table called "blocked MACs", and put the MAC addresses in
>> there.  Then, in the "authorize" section, do:
>>
>>  if (Calling-Station-Id == "%{sql: SELECT ....}") {
>>      reject
>>  }
>>
>>  Fix the SQL statement to SELECT the row containing the
>> Calling-Station-Id.
>>
>>  Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091215/490cc4f5/attachment.html>