[EXTERNAL] Re: Mac Authentication

[Winfield, Alister (Senior Solutions Architect)]

You need to consider what the source of the RADIUS request is doing.

In this case, (I’m assuming WiFI hotspot) It’s taking the information from a devices DHCP request and put it into a RADIUS attribute. Sadly, neither the attribute used nor the formatting of the data is well defined. So if you have >1 type of RADIUS client you may see all sort of variability eg no-colons, colons, uppercase, lowercase, with a prefix / suffix etc.

Common solution for mac address matching is to convert the incoming mac-address (here in the username attribute) to a single format that is in the user database. This requires configuration that I’m not going to try to write, partly because I’m sure such examples have been posted here in the past. Then ensure that the user database uses the same format probably by using the same logic to ensure its always in your chosen canonical form.

If you are lucky and have only one “RADIUS client” type. Just ensure the user-database format matches what you receive, and your first issue will be solved.


Alister Winfield.

From: Freeradius-Users <freeradius-users-bounces+alister.winfield=sky.uk at lists.freeradius.org> on behalf of Ashfaque Shaikh <ashfaque.shaikh at idfy.com>
Date: Friday, 16 September 2022 at 11:26
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: [EXTERNAL] Re: Mac Authentication
Hi Jochem,


Appreciate your response. Yes, I have done this but authentication is
getting failed. When I am checking the logs through sudo freeradius -X, it
shows user not found. In username mac address is showing like
"00224DD1042B" and in dalo radius I have added a mac "00:22:4D:D1:04:2B" in
this format.


So I am a little confused here, When I am doing mac based authentication
then why freeradius is checking username. Can you please be able to help
me with this?



Best Regards,

Ashfaque Shaikh

On Fri, Sep 16, 2022 at 3:46 PM Jochem Sparla <J.Sparla at iolan.com> wrote:

> In DaloRADIUS, did you try to add a single MAC Address through the 'New
> User' and then 'MAC Address Authentication' option?
> Does that work?
>
> I have used FreeRADIUS + DaloRADIUS with MAC based authentication, without
> any special modifications in the FreeRADIUS config for MAC based
> authentication.
>
> Regards,
> Jochem
>
>
>
> IOLAN B.V. • Mon Plaisir 26 • 4879 AN Etten-Leur • The Netherlands
> T +31 (0)76 50 26 100 • F +31 (0)76 50 26 199
> E iolan at iolan.com • I https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.iolan.com%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pHUNzWm2B6mqqSnZa3YIWK3YHAFg1hDnEBiRRvBKprs%3D&reserved=0
>
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is
> uitsluitend
> bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt,
> wordt u
> verzocht de inhoud niet te gebruiken en de afzender direct te informeren
> door
> het bericht te retourneren.
> The information contained in this message may be confidential and is
> intended to be exclusively for the addressee. Should you receive this
> message
> unintentionally, please do not use the contents here in and notify the
> sender
> immediately by return e-mail.
>
> -----Oorspronkelijk bericht-----
> Van: Freeradius-Users [mailto:freeradius-users-bounces+j.sparla=
> iolan.com at lists.freeradius.org] Namens Ashfaque Shaikh
> Verzonden: vrijdag 16 september 2022 11:48
> Aan: Freeradius-Users at lists.freeradius.org
> Onderwerp: Mac Authentication
>
> Hi Team,
>
> Recently I have installed free radius server with daloradius GUI. I am
> trying to configure mac based authentication and for this I have added MAC
> address on daloradius server GUI in colon format. Now the problem I am
> facing is when my access point is sending MAC request to freeradius server
> it's getting rejected. When I am checking the debug logs in username MAC
> address is showing in plain format like 00224DD1042B this. Can anyone
> please help how I can achieve this mac authentication?
>
>
> Best Regards,
> Ashfaque Shaikh
>
> --
> IDfy is recognized as one of Asia's Top 5 companies in ID verification,
> KYC and employee background screening. Join us <
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fjob-openings%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=iUvSPTiLgDNYNbO2VRYQNMfjm7KZeD9Im3S6kC71%2F7w%3D&reserved=0>!<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fjob-openings%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=iUvSPTiLgDNYNbO2VRYQNMfjm7KZeD9Im3S6kC71%2F7w%3D&reserved=0%3e!>
> *Corporate / Registered Office* 8th
> Floor, Skyline Icon, Andheri – Kurla Road, Chimatpada, Marol, Andheri
> East, Mumbai MH 400059 IN Website <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=%2B8u9imcLv3acxEQHljzLTBEbTV7GwBidLvU3yiba0gk%3D&reserved=0> | LinkedIn <
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pd4eYlzTER6OqmxBNg6pjWHwP9md2wwuBSBpL30B3b0%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pd4eYlzTER6OqmxBNg6pjWHwP9md2wwuBSBpL30B3b0%3D&reserved=0%3e> | Instagram <
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fwe.are.idfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=H0K72b41LrkLlCFSei97ifVjmeH5xaJDSy6arls%2BfMI%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fwe.are.idfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=H0K72b41LrkLlCFSei97ifVjmeH5xaJDSy6arls%2BfMI%3D&reserved=0%3e> | Blog <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fblog%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=NJ8PGM8nDURK9xTKJgzdq7%2BLTeQbFxIomv5%2B56%2BN7Es%3D&reserved=0>
> | Contact Us <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fidfy-contact-us%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=Sd%2BdyEaDaLPRGY7t3DLwdfUI7E906EKQldfJ5LPLT0Q%3D&reserved=0> | Map <
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fg.page%2FIDfy-mumbai%3Fshare&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=2Bu3Hrt2MaiqEzWr1DAobr0EbCRUIxTMqIbcFLXo0Yo%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fg.page%2FIDfy-mumbai%3Fshare&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=2Bu3Hrt2MaiqEzWr1DAobr0EbCRUIxTMqIbcFLXo0Yo%3D&reserved=0%3e>
> *CIN* U74900MH2011PTC291275
>
>
>
> This
> message (including any attachments hereto) is confidential and is intended
> solely for the addressee. If you are not the intended recipient, you are
> hereby notified that any disclosure, copying, distribution or taking any
> action in reliance on the contents of this information is strictly
> prohibited and may be unlawful. If you have received this message in error,
> you are requested to delete it from your system and to contact the sender
> by replying to this message immediately. Baldor Technologies Private
> Limited is not liable for the improper transmission of this message nor for
> any damage sustained as a result of this message.
>
>
> -
> List info/subscribe/unsubscribe? See
> https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=T4vjCLanMeRz9EARiodxhhSo9mknN8%2Fxg%2Bz%2Fma6%2F%2FQI%3D&reserved=0
> -
> List info/subscribe/unsubscribe? See
> https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=T4vjCLanMeRz9EARiodxhhSo9mknN8%2Fxg%2Bz%2Fma6%2F%2FQI%3D&reserved=0
>

--
IDfy is recognized as one of Asia's Top 5 companies in ID verification, KYC
and employee background screening. Join us
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fjob-openings%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=iUvSPTiLgDNYNbO2VRYQNMfjm7KZeD9Im3S6kC71%2F7w%3D&reserved=0>!
*Corporate / Registered Office* 8th
Floor, Skyline Icon, Andheri – Kurla Road,
Chimatpada, Marol, Andheri East,
Mumbai MH 400059 IN
Website <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=%2B8u9imcLv3acxEQHljzLTBEbTV7GwBidLvU3yiba0gk%3D&reserved=0> | LinkedIn
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fidfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=pd4eYlzTER6OqmxBNg6pjWHwP9md2wwuBSBpL30B3b0%3D&reserved=0> | Instagram
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fwe.are.idfy%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=H0K72b41LrkLlCFSei97ifVjmeH5xaJDSy6arls%2BfMI%3D&reserved=0> | Blog
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fblog%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=NJ8PGM8nDURK9xTKJgzdq7%2BLTeQbFxIomv5%2B56%2BN7Es%3D&reserved=0> | Contact Us
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.idfy.com%2Fidfy-contact-us%2F&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=Sd%2BdyEaDaLPRGY7t3DLwdfUI7E906EKQldfJ5LPLT0Q%3D&reserved=0> | Map
<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fg.page%2FIDfy-mumbai%3Fshare&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600629135%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=2Bu3Hrt2MaiqEzWr1DAobr0EbCRUIxTMqIbcFLXo0Yo%3D&reserved=0>
*CIN* U74900MH2011PTC291275



This
message (including any attachments hereto) is confidential and is intended
solely for the addressee. If you are not the intended recipient, you are
hereby notified that any disclosure, copying, distribution or taking any
action in reliance on the contents of this information is strictly
prohibited and may be unlawful. If you have received this message in error,
you are requested to delete it from your system and to contact the sender
by replying to this message immediately. Baldor Technologies Private
Limited is not liable for the improper transmission of this message nor for
any damage sustained as a result of this message.


-
List info/subscribe/unsubscribe? See https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=05%7C01%7Calister.winfield%40sky.uk%7Cb091af285f074ea05c1a08da97cdd787%7C68b865d5cf184b2b82a4a4eddb9c5237%7C0%7C0%7C637989207600785349%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=gOi8nYM8NxfuikJHSD%2B3oov7NhEIPZ3FNDvRjxpHmbc%3D&reserved=0
--------------------------------------------------------------------
This email is from an external source. Please do not open attachments or click links from an unknown or suspicious origin. Phishing attempts can be reported by using the report message button in Outlook or sending them as an attachment to phishing at sky.uk. Thank you
--------------------------------------------------------------------
Information in this email including any attachments may be privileged, confidential and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you have received it in error, please notify the sender by return e-mail and delete it from your system. You should not reproduce, distribute, store, retransmit, use or disclose its contents to anyone. Please note we reserve the right to monitor all e-mail communication through our internal and external networks. SKY and the SKY marks are trademarks of Sky Limited and Sky International AG and are used under licence.

Sky UK Limited (Registration No. 2906991), Sky-In-Home Service Limited (Registration No. 2067075), Sky Subscribers Services Limited (Registration No. 2340150) and Sky CP Limited (Registration No. 9513259) are direct or indirect subsidiaries of Sky Limited (Registration No. 2247735). All of the companies mentioned in this paragraph are incorporated in England and Wales and share the same registered office at Grant Way, Isleworth, Middlesex TW7 5QD