Cisco AV Pair

[Alan DeKok]

Dan Fleming wrote:
> Thank you I have read through it makes sense. So how do I do something
> based on the results?

  The SQL document talks about "radreply", which lets you do something
with the results.

> I would like to only authorize a connection if the
> users password matches and they are connecting to the correct ssid in
> the av-pair. Is there a HOWTO or other document outlining how to do that?

  No.  Because that's a specific solution.  The documents describe how
the server works, and lets you put it together yourself.

  For your situation, the key is to understand that the server accepts
users if their password is correct.  If you add more conditional checks,
the user is still accepted.

  The solution is either to:

a) set the "known good" password ONLY if the conditions also match.  The
SQL documentation describes how to set conditions

b) if the password is stored somewhere else (e.g. LDAP), then you need
to REJECT the user if the conditions match.

  Alan DeKok.