[EMAIL PROTECTED] wrote: >> The format is whatever format the NAS sends in the User-Name attribute. > > Thanks Alan, that helped more than you know.
It's little things like that that make a *big* difference in setting up a system for the first time. And yes, I cover all of this in my book, which will be done real soon now... > This is what I am trying to do, I have a user in my users file, before they > are > allowed to authenticate I want to also check that the MAC address sent in the > Calling-Station-Id matches what is in the users file. So I would check not > only > for the username/passowrd but also that the MAC was the same for that user. i.e. each user has a pre-defined MAC they're allowed to use? > Is checkval what I am looking for or is there a certain syntax for the users > file that I am missing? I have read the /doc/processing_users_file, man 5 > users > and been going through the config files in the /etc/raddb. directory, with no > success. You can do: bob Calling-Station-Id != "0001....", Auth-Type := Reject But that's awkward to scale to many users. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
