Need information on checking for SSID during group verification

Adarsha S s.adarsha at gmail.com
Thu Sep 3 12:33:18 CEST 2015


Hi ,

I'm using free-radius on my debian linux.
Free radius is contacting external WINDOWS AD server for authentication.

The topology is to authenticate Mobile unites[MU] connecting to wireless
network.
The MU's are authenticated along with group verification.

During group verification I'm able to configure Login-Time also as one of
the check.
Along with this I need to verify the SSID via which MU's are connecting.

Please guide me what changes/add I need to do in config file of Radius.

Below is my user file content:
*/root # more /etc/raddb/users*


*DEFAULT Realm != "NULL"*

*anonymous Auth-Type := EAP*
*         Fall-Through = No*

*Anonymous Auth-Type := EAP*
*         Fall-Through = No*


*#Access Policy for Guest Users....*


*# primary ldap group policy configuration*

*# Policy for the groups*
*DEFAULT        ldap_primary-Ldap-Group == "adarsha_radius_group_1",
Login-Time := "Any0600-2359"*
*        Symbol-User-Group = "adarsha_radius_group_1",*

*        Symbol-Allowed-ESSID += "adarsha_wlan"*
*DEFAULT        ldap_primary-Ldap-Group == "adarsha_radius_group",
Login-Time := "Any0600-2359"*

*        Symbol-User-Group = "adarsha_radius_group",*

*        Symbol-Allowed-ESSID += "adhi_2"*
*DEFAULT        ldap_primary-Ldap-Group == "adarsha_radius_group_2",
Login-Time := "Any0000-2359"*

*        Symbol-User-Group = "adarsha_radius_group_2",*

*DEFAULT        Auth-Type := Reject*


I need to use Symbol-Allowed-ESSID as one of the parameter for group
verification.
Currently its only group and login time:
*ldap_primary-Ldap-Group == "adarsha_radius_group_1", Login-Time :=
"Any0600-2359"*

Please guide me

Thanks,
Adarsha


More information about the Freeradius-Users mailing list