Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Arran Cudbard-Bell
Arran Cudbard-Bell wrote: Alan DeKok wrote: Brian Ertel wrote: DEFAULTUser-Name =~ "([0-9a-fA-F]:)5[0-9a-fA-F]", Auth-Type := Accept ... vlan stuff So for username are you saying I can use any old text string? *([0-9a-fA-F]:){5}[0-9a-fA-F] unless you want to match 0:50 ;

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Arran Cudbard-Bell
Alan DeKok wrote: Brian Ertel wrote: DEFAULT User-Name =~ "([0-9a-fA-F]:)5[0-9a-fA-F]", Auth-Type := Accept ... vlan stuff So for username are you saying I can use any old text string? *([0-9a-fA-F]:){5}[0-9a-fA-F] unless you want to match 0:50 ;) What leads you to c

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Alan DeKok
Brian Ertel wrote: > Unknown attribute "Cleartext-Password" Use 1.1.7. It contains MAY bug fixes, security fixes, and features over previous versions. If you're not going to use 1.1.7, just use User-Password instead of Cleartext-Password. But you SHOULD use ":=" for the operator, rather tha

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Phil Mayers
On Mon, 2007-08-27 at 09:42 -0400, Brian Ertel wrote: > Alan, > > I now have the users file syntax like this: > > 00:0e:35:1c:e0:52 Cleartext-Password := "testing" > > Tunnel-Medium-Type = "IEEE-802", > Tunnel-Type = "VLAN", > Tunnel-Private-Group-Id = "157", R

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
". radiusd.conf[1773] Failed to parse authorize section. Brian. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, August 27, 2007 9:12 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Bria

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
Ok. I will do that. Thanks, Brian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, August 27, 2007 9:12 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Brian Ertel wrote: > DEFA

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Alan DeKok
Brian Ertel wrote: > DEFAULT User-Name =~ "([0-9a-fA-F]:)5[0-9a-fA-F]", Auth-Type := Accept > ... vlan stuff > > So for username are you saying I can use any old text string? What leads you to conclude that? Have read the documentation for the "users" file? Do you know what a reg

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Monday, August 27, 2007 8:34 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Brian Ertel wrote: > a correction of what I am using or syntax to accomplish the > unknown/known user i

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Alan DeKok
Brian Ertel wrote: > a correction of what I am using or syntax to accomplish the > unknown/known user issue? It's a correction of the entry for a known user. See the README and "man rlm_pap" in 1.1.7. > In other words which syntax takes care of the unknown users and which > takes care of the k

RE: Freeradius, Cisco WLC, Mac address auth.

2007-08-27 Thread Brian Ertel
7, 2007 1:38 AM To: FreeRadius users mailing list Subject: Re: Freeradius, Cisco WLC, Mac address auth. Brian Ertel wrote: > I have freeradius working with a Cisco 2000 series controller. A > wireless client attempts to associate with a WAP the controller sends an > auth request to freeradi

Re: Freeradius, Cisco WLC, Mac address auth.

2007-08-26 Thread Alan DeKok
Brian Ertel wrote: > I have freeradius working with a Cisco 2000 series controller. A > wireless client attempts to associate with a WAP the controller sends an > auth request to freeradius who sees the mac address of the user: > > 00:0e:35:1c:e0:52 Auth-Type := Local, User-Password == "testing"