Cache for machine authentication

[Alan DeKok]

Garber, Neal wrote:
> Can someone tell me if it is possible in FR to cache in memory (for a
> short amount of time) Calling-Station-Id from successful machine
> authentications so that subsequent user authentications can test whether
> the user is connecting from an authorized device?  This is a feature
> that is available with Cisco ACS version 5 (using attribute
> Was-Machine-Authenticated) that I am trying to emulate in FR.

  My suggestion would be to use the "redis" module.

  Cisco ACS seems to do it internally, because it's a monolithic
application.  FreeRADIUS is built out of pieces.  We're not a database,
so we recommend using one where necessary.

  Alan DeKok.