Hi,
I am currently trying to create a new auth system for our WPA 802.1x WiFi network. Thus far I have the server authenticating using PEAP(MSCHAPv2) against a users file containing a simple test user/pass pair. What I would now like to do is use MySQL to contain user data such as the VLAN to be assigned to that user and which LDAP server their account exists on, then use LDAP to verify the credentials. The idea being that a PEAP request comes in, tunnel gets built etc, the user gets looked up in the MySQL database, the credentials are then authenticated against the correct LDAP (or RADIUS) server, then on success an access-accept along with the user's VLAN is passed back to the NAS.
The question is, is it possible for PEAP(MSCHAPv2) and LDAP with MySQL to interact in this way?
Many thanks, Jezz Palmer. |
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html