Re:

2009-10-26 Thread John Ward
Hi There, so would you use the mac address as the username in the table?

i have a similar requirement but with calling station id.
right now i use a file with the DEFAULT Calling-Station-Id =
12345567 , Auth-Type := Accept but have wondered how to put it into
the mysql database without messing the sql queries up

J

On Mon, Oct 26, 2009 at 9:11 PM, Ivan Kalik t...@kalik.net wrote:
 I want to have one computer just do mac authentication, instead of
 matching
 username and password. Can I just add this mac address to the mysql
 database.

 Yes, as User-Name with Auth-Type Accept.

 I am running chillispot also, I believe all I have to do is
 uncomment a line in the chilli.conf file to have it do mac authentication.
 Would this be the right way to do this?

 Probably. That's the question for ChilliSpot list.

 Ivan Kalik
 Kalik Informatika ISP

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




-- 
--
Regards
John

DISCLAIMER: The information in this message is confidential and may be
legally privileged. It is intended solely for the addressee. Access to
this message by anyone else is unauthorised. If you are not the
intended recipient, any disclosure, copying, or distribution of the
message, or any action or omission taken by you in reliance on it, is
prohibited and may be unlawful. Please immediately contact the sender
if you have received this message in error. Thank you.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Authenticating access via caller-id or username/password

2009-10-13 Thread John Ward
Good Day,
I've an interesting question.
I currently authenticate users via caller-id for a static ip delivery system.

I have had to change the sql_user_name to the calling-station-id
attribute so that i can match the entries to so called  usernames in
the MYSQL database

This is working and works well as the username for authentication ends
up being the caller id.

I now have to authenticate users based on username and password in one
instance and solely calling-station-id in another.

the config i use in the files to authenticate a user on caller id is
as follows:

DEFAULT Calling-Station-ID ==1234567890, Auth-Type := Accept
Framed-IP-Address = 155.22.0.21

DEFAULT Calling-Station-ID ==2234567890, Auth-Type := Accept
Framed-IP-Address = 155.22.0.22

DEFAULT Calling-Station-ID ==3234567890, Auth-Type := Accept
Framed-IP-Address = 155.22.0.23

DEFAULT Calling-Station-ID ==4234567890, Auth-Type := Accept
Framed-IP-Address = 155.22.0.24

the DEFAULT section has the framing types etc set.

How would i now do this in the MYSQL database as there is no way of
tying the username to anything ?


Regards
John
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Authenticating access via caller-id or username/password

2009-10-13 Thread John Ward
Hi There,
the authentication will take place based only on the calling station id.

in one scenario: the users use usernames and passwords.

in the second scenario, a device is authenticated on the
calling-station-id as it has no username or password.
the device is put into a different part of the network.

i was thinking of this:
sql_user_name = %{User-Name:-%{Calling-Station-Id:-DENY}}

the problem is that the NAS returns VOID as the username if its left blank.

seeing as i have to tie the username to something usefull to make a
select statement i guess i'm looking for a method to put the calling
station id into the username field if the username is VOID

where would the best place for that be and how could it be done? I see
some nifty UNLANG examples but none that work on run time
substitutions.

Regards
John

On Tue, Oct 13, 2009 at 3:54 PM, Ivan Kalik t...@kalik.net wrote:
 I now have to authenticate users based on username and password in one
 instance

 That's easy, but ...

 and solely calling-station-id in another.

 ... what does that mean? Each user can call from a specific callerID? Each
 user can call from a specific list of callerIDs? Every user can call from
 a list of (all) known callerIDs? Solution will depend on the policy.

 Ivan Kalik
 Kalik Informatika ISP

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html