FR Using MAC Authentication

[Tim Sylvester]

Steve,

 

Your wireless access point is sending the MAC address as the username and password. Change the username and password in the users file and the authentication will work.

 

rad_recv: Access-Request packet from host 10.10.18.241:2160, id=7, length=53
        User-Name = "00215c-08b25d"         <---  This came from the wireless access point
        User-Password = "00215c-08b25d"    <---  This came from the wireless access point



 

Tim

 

From: freeradius-users-bounces+tim.sylvester=networkradius.com at lists.freeradius.org [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com at lists.freeradius.org] On Behalf Of Steve Wu
Sent: Friday, May 08, 2009 8:35 AM
To: freeradius-users at lists.freeradius.org
Subject: FR Using MAC Authentication

 

Hi -

I have just started tinkering with Freeradius, I built an Ubuntu 8.10 server box and installed FR --> sudo apt-get install freeradius*. It installed in a breeze and tested fine. I have setup a HP420 AP for testing, it's chattering with the FR box fine (I think).

I want my wireless clients to do MAC authentication via the FR box. I have setup my users file to auth two of my test laptops:

000E35-84610A Auth-Type := Local, User-Password == "esradius"
00215C-08B25D Auth-Type := Local, User-Password == "esradius"

When either tries to connect up, in the FR debug I see:

rad_recv: Access-Request packet from host 10.10.18.241:2160, id=7, length=53
        User-Name = "00215c-08b25d"
        User-Password = "00215c-08b25d"
  Processing the authorize section of radiusd.conf

The authentication eventually fails:

rlm_pap: WARNING! No "known good" password found for the user.  Authentication may fail because of this.

Why is the User-Password the MAC address and not what is specified in the users file? I have only tweaked the users and clients.conf files.

Just simple MAC authentication, that's all I want at this point.

Thanks in advance!

- Steve




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090508/94b9f7d2/attachment.html>