How to deal with device self-registration best?

[Nilsson, Cristian (Göteborg)]

Hello,

Thank you for such fast answer.
While your way definitely seems like the best way I don't think we have that option with extreme wing controllers.

Where would I start looking to modify the access-accept/reject function of freeradius?

My idea is to do the normal check and if failed just insert into the database.
 
Br,
Cristian 

Skickat från min iPhone

> 29 jan. 2020 kl. 01:37 skrev Alan DeKok <aland at deployingradius.com>:
> 
>> On Jan 28, 2020, at 5:16 PM, Nilsson, Cristian (Göteborg) <Cristian.Nilsson at eltelnetworks.se> wrote:
>> I have a setup of Extreme Wing wi-fi controller and want to implement a guest-user system with captive-portal and device registration/recognition in combination with the standard pre-defined users.
> 
>  Generally speaking, registration is done by the captive portal.  RADIUS doesn't really support that.
> 
>> I have a radius server going and everything is good as long as I have a user created in radius.
> 
>  Yes.
> 
>> Now my challenge is that for "device registration" I see in radius debugs a username sent in form of device mac-address (password is empty) and the expected access-reject as this user is not defined.
> 
>  Yes, because the user / device isn't known.
> 
>> How can I on the fly add non-existing users into radius database (we use mysql) and from there let accounting take over for session limitations etc?
> 
>  While it's possible to update the SQL tables dynamically, it's not recommended.  FreeRADIUS doesn't typically have write permission to the "radcheck" and "radreply" tables, for security reasons.
> 
>  My $0.02 is to get the captive portal to update the SQL database.  It's the common practice, and it's the best / simplest way to do it.
> 
>  Alan DeKok.
> 
> 
> -
> List info/subscribe/unsubscribe? See https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=02%7C01%7C%7C836dcafa7fe0440b962908d7a4537050%7C9efbd86ae4b1487daab00eb074722602%7C0%7C0%7C637158550582067371&sdata=%2B9anJ7ZFcuUY%2FIm9ZPESk27EWdUFNIL3PIUJg%2ByNTmo%3D&reserved=0