MAC Auth tied to user

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Tue Aug 11 12:11:57 CEST 2015


Hi,

> anyone here have experience to implement
> authorization and accounting from mac to user ?

no - but the request is fairly simple

> For example:
> User john is tied to mac aa-bb-cc-dd-ee-ff.
> every authorization comes from this mac,
> radius will check session for user john.
> and do accounting for user john also.
> So, every packet auth/acct come from NAS, username 'mac'  will be replaced
> to 'user' subsquent process.
> i think unlang is the solution.
> anyone here could give us suggest/idea ?

use unlang.  you have a DB lookup to convert the MAC to the username - assign a temporary
attribute and use that in the acct update call rather than User-Name (which would be the MAC)

alan


More information about the Freeradius-Users mailing list