IP locking with freeradius

[Renan Rodrigues]

Thanks a lot!

Atenciosamente,

RENAN DE SOUZA RODRIGUES
Open Source Enthusiastic
Computational Physicist
Linux Professional Level 2
Centro de Computação Meteorológica de Alto Desempenho
Coordenação-Geral de Modelagem Numérica
Tel: (61)2102-4728
      (61)9220-6016
INMET
Instituto Nacional de Meteorologia
Eixo Monumental Via S1
Sudoeste Brasília-DF

Slackware user:
- Safely Work!
- Safely Guard!


On Wed, May 29, 2013 at 2:52 PM, Alan DeKok <aland at deployingradius.com>wrote:

> Renan Rodrigues wrote:
> > There is something I am trying to do with radius and can't find how.
> > (One month googling and nothing done...)
> > What I want is to authenticate my users with their MAC and IP-ADDRESS,
> > so, even if they have root-access to their systems, they can't change
> > their IP-ADDRESS by themselves, because radius is going to reject then.
> >
> > Until now, I have a radius mac-authenticating and working together with
> > dhcpd. I've tried to use ip-pool, that works, but someone still can
> > change ip-address by hand and keep networking....
> >
> > So, it is possible to work this out?
>
>   No.
>
>   The IP address doesn't come in the Access-Request.  So you can't
> enforce it.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130529/ed6952eb/attachment.html>