Mac-auth. authorized_macs file sintax
Roberto Ortega Ramiro
roberto.ortega at escuelassj.com
Fri Jun 21 13:23:28 CEST 2013
Hello, I have configured freeradius for accept one host conection over host
mac address
This is the log, at the end appear the error:
Called-Station-Id = "00-90-0B-23-2E-BF:EquiposPortatiles"
Calling-Station-Id = "98-0C-82-B5-00-F2"
Framed-MTU = 1250
NAS-Port-Type = Wireless-802.11
Framed-Compression = None
Connect-Info = "CONNECT 802.11g"
EAP-Message = 0x02010010016c756e612e20626f726a61
Message-Authenticator = 0xa4425334968358101505d6ea0a22f5d8
Fri Jun 21 12:25:22 2013 : Info: # Executing section authorize from file
/etc/raddb/sites-enabled/default
Fri Jun 21 12:25:22 2013 : Info: +- entering group authorize {...}
Fri Jun 21 12:25:22 2013 : Info: ++[preprocess] returns ok
Fri Jun 21 12:25:22 2013 : Info: ++- entering policy
rewrite.calling_station_id {...}
Fri Jun 21 12:25:22 2013 : Info: +++? if ((Calling-Station-Id) &&
"%{Calling-Station-Id}" =~ /^%{config:policy.mac-addr}$/i)
Fri Jun 21 12:25:22 2013 : Info: ?? Evaluating (Calling-Station-Id) -> TRUE
Fri Jun 21 12:25:22 2013 : Info: expand: %{Calling-Station-Id} ->
98-0C-82-B5-00-F2
Fri Jun 21 12:25:22 2013 : Info: expand: policy.mac-addr ->
policy.mac-addr
Fri Jun 21 12:25:22 2013 : Info: expand: ^%{config:policy.mac-addr}$ ->
^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$
Fri Jun 21 12:25:22 2013 : Info: ? Evaluating ("%{Calling-Station-Id}" =~
/^%{config:policy.mac-addr}$/i) -> TRUE
Fri Jun 21 12:25:22 2013 : Info: +++? if ((Calling-Station-Id) &&
"%{Calling-Station-Id}" =~ /^%{config:policy.mac-addr}$/i) -> TRUE
Fri Jun 21 12:25:22 2013 : Info: +++- entering if ((Calling-Station-Id) &&
"%{Calling-Station-Id}" =~ /^%{config:policy.mac-addr}$/i) {...}
Fri Jun 21 12:25:22 2013 : Info: expand: %{1}-%{2}-%{3}-%{4}-%{5}-%{6}
-> 98-0C-82-B5-00-F2
Fri Jun 21 12:25:22 2013 : Info: expand:
%{tolower:%{1}-%{2}-%{3}-%{4}-%{5}-%{6}} -> 98-0c-82-b5-00-f2
Fri Jun 21 12:25:22 2013 : Info: ++++[request] returns ok
Fri Jun 21 12:25:22 2013 : Info: ++++[updated] returns updated
Fri Jun 21 12:25:22 2013 : Info: +++- if ((Calling-Station-Id) &&
"%{Calling-Station-Id}" =~ /^%{config:policy.mac-addr}$/i) returns updated
Fri Jun 21 12:25:22 2013 : Info: +++ ... skipping else for request 3:
Preceding "if" was taken
Fri Jun 21 12:25:22 2013 : Info: ++- policy rewrite.calling_station_id
returns updated
Fri Jun 21 12:25:22 2013 : Info: [authorized_macs] expand:
%{Calling-Station-ID} -> 98-0c-82-b5-00-f2
Fri Jun 21 12:25:22 2013 : Info: ++[authorized_macs] returns noop
I have this authorized_macs file:
98-0c-82-b5-00-f2
Reply-Message = "Device with MAC Address %{Calling-Station-Id}
authorized for network access"
What's wrong?
I have try with:
98-0c-82-b5-00-f2 Expiration := "10 Jul 2013"
98-0c-82-b5-00-f2
Auth-Type := Accept
But nothing runs.
Thank you.
--
Un saludo.
____________________
Roberto Ortega
Profesor de Informática.
http://www.proyectoret.es
Escuelas San José Valencia
Avd.Cortes Valencianas nº1
46015 Valencia
R4600489A
Tf:963499011 ext. 262
Fax:963488835
http://www.escuelassj.com
No imprimas este correo si no es necesario. Protejamos el medio ambiente.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130621/7ff624a6/attachment.html>
More information about the Freeradius-Users
mailing list