I have just installed 2.05 and have successfully linked to my ldap
server. I would like to build in MAC address checking on top of the user
name / password auth.
I read some docs and concluded that I could change access_attr = to
use radiusCallingStationId. I set the value of this in LDAP to that
which I could see in the debug output; Calling-Station-Id =
"0019E3021FD8". The user happily logged in, however when I changed the
value he could still log in! Now I am guessing that this attribute is
only checked for presence within the user profile rather than checking
if they match.
Is there a way of getting Radius to check that the Calling-Station-Id
matches radiusCallingStationId before access is allowed? I have read the
ldap docs and not been able to find what I am looking for.
Many thanks,
Neil.
--
Neil Marjoram
Systems Manager
Adastral Park Campus
University College London
Ross Building
Adastral Park
Martlesham Heath
Ipswich - Suffolk
IP5 3RE
Tel: 01473 663711
Fax: 01473 635199
Reclaim Your Inbox!
http://www.mozilla.org/products/thunderbird
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
