Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sunday, February 24, 2013, Alan DeKok wrote: Russell Mike wrote: i also came across where guys are discussing EAP and MAC authentication. i could not conclude, if it is a better way of doing MAC authentication using EAP. To be clear: you don't. EAP is authentication. MAC

user doesnt connect but freeradius say connect

2013-02-24 Thread armagan yaman
I have a problem on the freeradius. When I was using these commands radwho and radlast it shows still login but some users doesnt connect. How can I fixed this Sorry for my bad english. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread David Peterson
I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device with the EAP request, you can extract the MAC from the request using unlang and check that against a database of MACs. No clue how to do this, I just know it can be done. David

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Alan DeKok
Russell Mike wrote: Thanks for guidelines. exactly, as you stated I simple want to store MAC address somewhere compair against the request. Can they be in radcheck? I wouldn't do that. Just create your own table of MAC addresses. If all you want is to list known MACs, you can do that with

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 2:20 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Thanks for guidelines. exactly, as you stated I simple want to store MAC address somewhere compair against the request. Can they be in radcheck? I wouldn't do that. Just create your own

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 1:55 PM, David Peterson dav...@wirelessconnections.net wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device with the EAP request, you can extract the MAC from the request using unlang and check that

RE: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread David Peterson
He approached the problem differently than most people. He already had a database with the MAC addresses. Due to a deployment mistake in the past he did not have the passwords from each of 500 EAP clients. So rather than going out and changing those addresses he matches up the MAC address with

Simple Proxy setup

2013-02-24 Thread Randy
Hi, I am upgrading from an older server which uses version 1 quite happily. The setup is simple, upstream proxies talk to my FreeRadius which then talks to my Home server which is a really old DOS based product. I read other threads saying just to use realms, but I still get lost in the conf

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
Understood, Thanks dear David. P, for participating in my troubleshoot. i am grateful. Thanks / Regards RM -- On Sun, Feb 24, 2013 at 3:31 PM, David Peterson dav...@wirelessconnections.net wrote: He approached the problem differently than most people. He already had a database with the MAC

Re: Simple Proxy setup

2013-02-24 Thread Alan DeKok
Randy wrote: I read other threads saying just to use realms, but I still get lost in the conf files. Read proxy.conf, configure realms. It should be 2-3 lines per home server. Exactly what do I need in the clients, proxy and radiusd.conf files? Don't touch radiusd.conf. Add a

Re[2]: Simple Proxy setup

2013-02-24 Thread Randy
Thanks, I will try it late tonight. *** REPLY SEPARATOR *** On 24/02/2013 at 9:55 PM Alan DeKok wrote: Randy wrote: I read other threads saying just to use realms, but I still get lost in the conf files. Read proxy.conf, configure realms. It should be 2-3 lines per