Toggle Calling-Station-Id check item based on Framed-Protocol?
William Burnett
burnett.w at gmail.com
Sat Oct 16 02:07:42 CEST 2010
Thinking this over I may have thought of a solution, but if anyone can
suggest something better let me know...
I write another SQL module call it sql_ppp and change the query so
that it omits any records with an attribute == Calling-Station-Id, and
the use unlang to call that module when Service-Type == PPP.
Unless there's a way to use unlang to strip the check item, i don't
know how else to accomplish this.
Sincerely,
William Burnett
burnett.w at gmail.com
On Fri, Oct 15, 2010 at 4:21 PM, William Burnett <burnett.w at gmail.com> wrote:
> Hello all..
>
> I'm trying to setup my Radius server so that it will map MAC addresses
> to TTLS user/pass for 802.1x. I have that part working fine. The
> problem is, the same user/pass pair I'm also using for the clients
> PPPoE authentication.
>
> I want the Calling-Station-Id to be verified when an EAP/TTLS session
> is being authenticated, but I don't want to check the
> Calling-Station-Id when the PPPoE session is authenticating. This is
> because the TTLS device is known and controlled by me, the PPPoE
> device may be any MAC address that I don't want to have to maintain a
> list of.
>
> My question is, using unlang is there an option do delete a check item
> attribute based on another attribute?
>
> IE:
>
> if (Framed-Protocol == PPP) {
> update-control {
> Calling-Station-Id !* # Not sure
> if I'm using the !* operator properly here
> }
> }
>
> That code just yields errors, but thats essentially what I'm trying to do...
>
> Sincerely,
>
> William Burnett
> burnett.w at gmail.com
>
More information about the Freeradius-Users
mailing list