Authentication either username or mac address

Alan DeKok aland at deployingradius.com
Tue Dec 4 14:59:24 CET 2018


On Dec 4, 2018, at 8:44 AM, Mohammad Mahefooz <mahefooz4u at gmail.com> wrote:
> 
> In radcheck table, if we use email address as value in User-Name
> attribute, user can login with his email address as username. In case if we
> use MAC as value in User-Name attiribute, user can login using MAC
> authentication. As of now, we can use 'only' either value. Requirement is
> to enable user to use both. He can login with either email or MAC. Just
> found the below solution suggested in one of the forum. Would like to know
> if it is feasible?

  Well, it doesn't let the user log in with the *User-Name* set to either the name or the MAC address.  It lets a user log in with one User-Name, but multiple devices.  And, where the MAC address is set automatically in the Calling-Station-Id attribute.

  As with anything, you have to define the requirements.  Then, the solution usually becomes clear.

  If the user logs in with the User-Name set to the MAC address, then you don't know who the real user is.

  Again, you're asking for a solution, but you don't really know what you want to do.  Define the problem first.

  What do you want to allow the user to have in the User-Name attribute?

  Is the MAC in the Calling-Station-Id attribute?  (LOOK IN THE DEBUG OUTPUT)

  etc.

  You can't just post a question saying "I want to do stuff", and expect us to come up with a solution.  Vague questions get vague answers.  Detailed questions get detailed answers.

  Alan DeKok.




More information about the Freeradius-Users mailing list