"Mike Hall" <[EMAIL PROTECTED]> wrote:
> Its alive!!  Using your radcheck configuration the Cisco 1200 APs work
> with freeradius <wipes brow>.  But of course, I have another
> problem...the Orinoco APs don't work with this configuration!  Some
> debugging brought me to this conclusion on what will work for the
> different access points:

  Was this not documented for the AP's?  I haven't been happy with
most AP documentation, but *something* should have been documented.

  Further, allowing "users" to log in based on MAC addresses is a bad
idea.  The MAC addresses are public information.

> So what now?  I could create 2 different tables, then use something
> (please help me here, huntgroups?) to tell freeradius which type of AP
> is making the request,  then use the correct sql statement to select on
> mysql.

  Huh?  Why?  Managing passwords isn't difficult.  So for one AP, you
add (by hand) the password which just happens to be the MAC address.
For another AP, you add a different password.

> Another option is to modify the modcall[authorize] sql statement to
> say something like if "Username = MacAddress OR Username =
> SharedSecret".

  That is by far and away too complicated.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to