Thanks a lot!
Atenciosamente,
RENAN DE SOUZA RODRIGUES
Open Source Enthusiastic
Computational Physicist
Linux Professional Level 2
Centro de Computação Meteorológica de Alto Desempenho
Coordenação-Geral de Modelagem Numérica
Tel: (61)2102-4728
(61)9220-6016
INMET
Instituto Nacional de Meteorologia
Eixo Monumental Via S1
Sudoeste Brasília-DF
Slackware user:
- Safely Work!
- Safely Guard!
On Wed, May 29, 2013 at 2:52 PM, Alan DeKok <[email protected]>wrote:
> Renan Rodrigues wrote:
> > There is something I am trying to do with radius and can't find how.
> > (One month googling and nothing done...)
> > What I want is to authenticate my users with their MAC and IP-ADDRESS,
> > so, even if they have root-access to their systems, they can't change
> > their IP-ADDRESS by themselves, because radius is going to reject then.
> >
> > Until now, I have a radius mac-authenticating and working together with
> > dhcpd. I've tried to use ip-pool, that works, but someone still can
> > change ip-address by hand and keep networking....
> >
> > So, it is possible to work this out?
>
> No.
>
> The IP address doesn't come in the Access-Request. So you can't
> enforce it.
>
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
