How to deal with device self-registration best?
Nilsson, Cristian (Göteborg)
Cristian.Nilsson at eltelnetworks.se
Wed Jan 29 08:26:20 CET 2020
Thank you for such fast answer.
While your way definitely seems like the best way I don't think we have that option with extreme wing controllers.
Where would I start looking to modify the access-accept/reject function of freeradius?
My idea is to do the normal check and if failed just insert into the database.
Skickat från min iPhone
> 29 jan. 2020 kl. 01:37 skrev Alan DeKok <aland at deployingradius.com>:
>> On Jan 28, 2020, at 5:16 PM, Nilsson, Cristian (Göteborg) <Cristian.Nilsson at eltelnetworks.se> wrote:
>> I have a setup of Extreme Wing wi-fi controller and want to implement a guest-user system with captive-portal and device registration/recognition in combination with the standard pre-defined users.
> Generally speaking, registration is done by the captive portal. RADIUS doesn't really support that.
>> I have a radius server going and everything is good as long as I have a user created in radius.
>> Now my challenge is that for "device registration" I see in radius debugs a username sent in form of device mac-address (password is empty) and the expected access-reject as this user is not defined.
> Yes, because the user / device isn't known.
>> How can I on the fly add non-existing users into radius database (we use mysql) and from there let accounting take over for session limitations etc?
> While it's possible to update the SQL tables dynamically, it's not recommended. FreeRADIUS doesn't typically have write permission to the "radcheck" and "radreply" tables, for security reasons.
> My $0.02 is to get the captive portal to update the SQL database. It's the common practice, and it's the best / simplest way to do it.
> Alan DeKok.
> List info/subscribe/unsubscribe? See https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=02%7C01%7C%7C836dcafa7fe0440b962908d7a4537050%7C9efbd86ae4b1487daab00eb074722602%7C0%7C0%7C637158550582067371&sdata=%2B9anJ7ZFcuUY%2FIm9ZPESk27EWdUFNIL3PIUJg%2ByNTmo%3D&reserved=0
More information about the Freeradius-Users