Reliably identify guest users/clients
Nico Thomas
nico.thomas at uni-konstanz.de
Tue Jul 3 21:38:08 CEST 2018
Hi,
I'm working on a module which allows a WiFi network host to dynamically
accept
or deny guests when they login.
Therefore, known Cleartext-Passwords (or guest account data in general)
are not
available when mod_authorize is called.
As my first idea of setting Auth-Type accept isn't possible in
combination with
EAP, I'm currently using a predefined password independent from the user
instead.
Then, I try to identify known users later. This is necessary as the
Access-Requests are typically retransmitted faster than the network host can
decide whether to let a guest in or not. At the moment, only
Calling-Station-Id
and user name are used for identification, which I am not really happy with.
So my question is: Are there other attributes available to a module in
addition
to the Calling-Station-Id, which could be used to identify a user/device
(besides credentials)?
Thanks in advance and regards,
Nico
More information about the Freeradius-Users
mailing list