Accept via calling-station value
Munroe Sollog
mus3 at lehigh.edu
Wed Jan 20 21:39:06 CET 2016
So I thought the authorized_macs file was comparing the calling-station-id, either way I added:
# cat authorized_macs
a41731f505fc
Reply-Message = "Device with MAC Address %{Calling-Station-Id} authorized for network access"
a4-17-31-f5-05-fc
Reply-Message = "Device with MAC Address %{Calling-Station-Id} authorized for network access"
Looks like the same output to me: http://paste.debian.net/hidden/6f83a72e/
On 01/20/2016 03:21 PM, Alan DeKok wrote:
> On Jan 20, 2016, at 3:11 PM, Munroe Sollog <mus3 at lehigh.edu> wrote:
>>
>> I have an aruba wireless network where I am trying to get free-radius to auth a device based on
>> calling-station id. Line 35 confirms my re-writing is working, but line 46 looks like it is
>> rejecting the match even though it is listed in the authorized_macs file.
>
> The entry in the authorized_macs file doesn't match the User-Name in the packet.
>
> Make them match, and it will work.
>
> The string "00-01-02-03-04-05" is NOT the same as "000102030405"
>
> Alan DeKok.
>
--
Munroe Sollog
LTS - Network Analyst
x85002
More information about the Freeradius-Users
mailing list