Re: Authenticating access via caller-id or username/password

2009-10-13 Thread John Ward
Hi There,
the authentication will take place based only on the calling station id.

in one scenario: the users use usernames and passwords.

in the second scenario, a device is authenticated on the
calling-station-id as it has no username or password.
the device is put into a different part of the network.

i was thinking of this:
sql_user_name = "%{User-Name:-%{Calling-Station-Id:-DENY}}"

the problem is that the NAS returns "VOID" as the username if its left blank.

seeing as i have to tie the username to something usefull to make a
select statement i guess i'm looking for a method to put the calling
station id into the username field if the username is "VOID"

where would the best place for that be and how could it be done? I see
some nifty UNLANG examples but none that work on run time
substitutions.

Regards
John

On Tue, Oct 13, 2009 at 3:54 PM, Ivan Kalik  wrote:
>> I now have to authenticate users based on username and password in one
>> instance
>
> That's easy, but ...
>
>> and solely calling-station-id in another.
>
> ... what does that mean? Each user can call from a specific callerID? Each
> user can call from a specific list of callerIDs? Every user can call from
> a list of (all) known callerIDs? Solution will depend on the policy.
>
> Ivan Kalik
> Kalik Informatika ISP
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Authenticating access via caller-id or username/password

2009-10-13 Thread Ivan Kalik
> I now have to authenticate users based on username and password in one
> instance

That's easy, but ...

> and solely calling-station-id in another.

... what does that mean? Each user can call from a specific callerID? Each
user can call from a specific list of callerIDs? Every user can call from
a list of (all) known callerIDs? Solution will depend on the policy.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Authenticating access via caller-id or username/password

2009-10-13 Thread John Ward
Good Day,
I've an interesting question.
I currently authenticate users via caller-id for a static ip delivery system.

I have had to change the "sql_user_name" to the "calling-station-id"
attribute so that i can match the entries to so called  usernames in
the MYSQL database

This is working and works well as the username for authentication ends
up being the caller id.

I now have to authenticate users based on username and password in one
instance and solely calling-station-id in another.

the config i use in the "files" to authenticate a user on caller id is
as follows:

DEFAULT Calling-Station-ID =="1234567890", Auth-Type := Accept
Framed-IP-Address = 155.22.0.21

DEFAULT Calling-Station-ID =="2234567890", Auth-Type := Accept
Framed-IP-Address = 155.22.0.22

DEFAULT Calling-Station-ID =="3234567890", Auth-Type := Accept
Framed-IP-Address = 155.22.0.23

DEFAULT Calling-Station-ID =="4234567890", Auth-Type := Accept
Framed-IP-Address = 155.22.0.24

the DEFAULT section has the framing types etc set.

How would i now do this in the MYSQL database as there is no way of
tying the "username" to anything ?


Regards
John
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html