Calling-Station-Id
Osmany
osmany at oc.quimefa.cu
Wed Jan 6 17:27:22 CET 2010
On Wed, 2010-01-06 at 17:05 +0100, Bjørn Mork wrote:
> Osmany <osmany at oc.quimefa.cu> writes:
>
> >> If you would like this test user connect from another phone number,
> >> simply add another entry in the same table, just as you did before.
> >>
> >
> > Add another entry with the Calling-Station-Id attribute? Let's see if I
> > understand. After I add the other entry in the table it would look like
> > this:
> >
> > |312|test at domain.com|Calling-Station-Id | == | "phonenumber"
> > |298|test at domain.com|MD5-Password | := | password
> > |313|test at domain.com|Calling-Station-Id | += | "phonenumber"
> >
> > Let me just clarify that I tried this before and when I try to connect with this user,
> > freeradius does not let me.
>
> No, that won't work. All the check items must match for FreeRADIUS to
> consider the user. Testing the same attribute for equality with two
> different values is pointless.
>
> You'd either have to use groups, or much simpler: Use the regexp
> operator to match Calling-Station-Id against a regexp of all the values
> you want to allow. I.e
> Calling-Station-Id =~ phonenumber|phonenumber|etc
>
> This will also allow you to ignore leading digits (area codes etc),
> match on a seqence of numers, etc etc.
>
>
> Bjørn
That works fine if I try to connect from the phone numbers specified,
but if I try to connect from any other phone number, it still lets me
in. The point is that I don't want the user to be able to connect from
any other phone number unless it is specified in the Calling-Station-Id
attribute.
More information about the Freeradius-Users
mailing list