Re: Mac Auth and post-auth logging to SQL

2011-03-29 Thread Phil Mayers
On 03/29/2011 08:52 PM, Jason Antman wrote: This makes MUCH more sense, thanks! Now the next (relatively new-to-radius) person won't end up as confused as I was. I have MAC auth working with a SQL data source and custom XLAT to check for some special field values in SQL, based on a somewhat cust

Re: Mac Auth and post-auth logging to SQL

2011-03-29 Thread Jason Antman
This makes MUCH more sense, thanks! Now the next (relatively new-to-radius) person won't end up as confused as I was. I have MAC auth working with a SQL data source and custom XLAT to check for some special field values in SQL, based on a somewhat custom schema (more from the one-row-per-MAC s

Re: Mac Auth and post-auth logging to SQL

2011-03-29 Thread Phil Mayers
On 03/29/2011 07:13 PM, Jason Antman wrote: I just found out that the FreeRadius wiki is *not* publicly editable. Too much spam :o( Could whoever maintains it please update the Mac-Auth article at http://wiki.freeradius.org/Mac-Auth to remove the parts that Alan said "make no sense"? The

Re: Mac Auth and post-auth logging to SQL

2011-03-29 Thread Jason Antman
Alan DeKok wrote: Because you're doing it wrong. The whole point of accepting the user is that you *don't* reject them. Change your rules to reject the user *before* they're accepted. The logging will then behave as you expect. It doesn't behave as you expect now, because you're rejecting

Re: Mac Auth and post-auth logging to SQL

2011-03-29 Thread Jason Antman
Ok. I was just assuming that the FreeRadius Wiki was an authoritative source, and if it's written there, there must be something I just wasn't understanding that required it to be that way. When I get something working correctly, shall I register for an account and update your wiki page accordi

Re: Mac Auth and post-auth logging to SQL

2011-03-27 Thread Alan DeKok
Jason Antman wrote: > And in post-auth{}: > ### snip ### > if(control:Auth-Type == 'CSID'){ > # Authorization happens here > authorized_macs.authorize > if(!ok){ > reject Uh... why? If the user is authenticated, you shouldn't be rejecting him. > If I put a "sql" line before

Re: Mac Auth and post-auth logging to SQL

2011-03-25 Thread Jason Antman
I'm referencing the Mac-Auth wiki page at: http://wiki.freeradius.org/Mac-Auth Alan DeKok wrote: Jason Antman wrote: I'm running FreeRADIUS 2.1.7 on CentOS 5, and trying to configure MAC Auth Bypass. I got everything functioning correctly using the Mac-Auth Wiki page as a guide, including p

Re: Mac Auth and post-auth logging to SQL

2011-03-25 Thread Alan DeKok
Jason Antman wrote: > I'm running FreeRADIUS 2.1.7 on CentOS 5, and trying to configure MAC > Auth Bypass. I got everything functioning correctly using the Mac-Auth > Wiki page as a guide, including placement of the actual CSID > authentication code in the post-auth section. However, I just enabled

Mac Auth and post-auth logging to SQL

2011-03-25 Thread Jason Antman
Hello, I'm running FreeRADIUS 2.1.7 on CentOS 5, and trying to configure MAC Auth Bypass. I got everything functioning correctly using the Mac-Auth Wiki page as a guide, including placement of the actual CSID authentication code in the post-auth section. However, I just enabled SQL in the pos