Joe Warren-Meeks wrote:
Anyone got any ideas on this? I'm a little stuck as to where to start..
I don't know how you'd do it with a database, but with the users file,
it'd be something like:
username incoming-req-uri != "http://foo.com/bar";, Auth-Type := Reject
Reply-Message = "You can't access this URL"
Fall-Through = No
username User-Password := "pass"
Basically, there are lots of ways of doing what you want to do. From
what I remember about the SQL backend, it should just be a case of putting:
insert into radchech (username,attribute,op,value) values (
'username',
'incoming-req-uri',
'==',
'http://foo.com/bar'
);
...and it should work.
-- joe.
On 1 Aug 2006, at 13:42, Joe Warren-Meeks wrote:
Oops, should point out that I'm currently using the following line to
get the URL into the access-request:
echo "User-Name = joe, Password = testing, incoming-req-uri =
http://www.blibble.net/path_to"; | ./radclient 127.0.0.1 auth testing123
This puts it into the access-request and the radius server sees it
rad_recv: Access-Request packet from host 127.0.0.1:32770, id=106,
length=79
User-Name = "joe"
User-Password = "testing"
incoming-req-uri = "http://www.blibble.net/path_to";
Processing the authorize section of radiusd.conf
Thanks.
-- joe.
On 1 Aug 2006, at 13:39, Joe Warren-Meeks wrote:
Hey guys,
(Using freeradius-1.1.2 on Ubuntu Linux, with MySQL backend)
I'm setting up an HTTP based download service and we are looking to
authenticate users to download a specific object only. So, I'm
looking for a way to authenticate based on username, password and url.
Now, I can extend the radcheck table to include the URL and add that
into the sql query as defined in mysql.conf, but how do I get
freeradius to authenticate on the triple?
Any ideas? My search in the mailing list for URL and authenticate
strangely turned up a lot of results ;-)
Thanks.
-- joe.
Joe Warren-Meeks T: +44 (0) 208 962 0007
Aggregator Ltd. M: +44 (0) 7789 176 078
Unit 62/63 Pall Mall Deposit F: +44 (0) 208 962 0008
124-128 Barlby Road, London W10 6BL
PGP: 361F 78D0 56F5 8D7F 2639 947D 71E2 8811 F825 64CC
Joe Warren-Meeks T: +44 (0) 208 962 0007
Aggregator Ltd. M: +44 (0) 7789 176 078
Unit 62/63 Pall Mall Deposit F: +44 (0) 208 962 0008
124-128 Barlby Road, London W10 6BL
PGP: 361F 78D0 56F5 8D7F 2639 947D 71E2 8811 F825 64CC
-List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Joe Warren-Meeks T: +44 (0) 208 962 0007
Aggregator Ltd. M: +44 (0) 7789 176 078
Unit 62/63 Pall Mall Deposit F: +44 (0) 208 962 0008
124-128 Barlby Road, London W10 6BL
PGP: 361F 78D0 56F5 8D7F 2639 947D 71E2 8811 F825 64CC
-List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
