----- Original Message ----- From: "Shadow X" <[EMAIL PROTECTED]> To: "Philippine Linux Users Group Mailing List" <[EMAIL PROTECTED]> Sent: Monday, April 26, 2004 6:21 AM Subject: Re: [plug] Username, Password and MAC Address Auth
> > For LAN authentication using PPPoE.. > > hope u can share ur idea... ok... pppoe is the best candidate to do this... all you need is a pppoe server that supports radius... when a client pppoe finished the discovery stage (PADI, PADO, PADR and PADS) but before the ppp session stage, the pppoe server already determined the mac address of the client and the session ID... depends on your pppoe server, for freebsd's pppoed for example, the mac address is available thru the environment variable named HISMACADDR ... since username and password are the only available input parameters for pppoe client authentication, you can append the mac addresss value (at your pppoe server side) thru one of the *access-request* attributes of radius when ppp invoke and communicate with the radius server... username will be assign to username radius attribute... password will be assign to password radius attribute... you can assign the mac address to *nas-identifier* radius attribute because this is a string attribute and part of the access-request of radius... with this... your radius server will try to compare the username, password and nas-identifier (where mac address is storedt there) to your radius database if the user is authorize to login or not... fooler. -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
