-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of
Alan DeKok
Sent: Wednesday, January 24, 2007 8:43 PM
To: FreeRadius users mailing list
Subject: Re: Proxying based on SSID
Lai Fu Keung wrote:
1. Check the realm, which will set to DEFAULT, as the domain is
unknown
I think both are wrong because you must distinguish amog the different SSIDs that an AP broadcast. It sometimes happens the wireless MAC are the same for all SSIDs. Only some devices (such as Mikrotik) let change the MAC for each ESSID.
Another thing is you have to differenciate the ESSID in
for the realms as you
suggest?
Lai
From: [EMAIL PROTECTED] on behalf of Alan DeKok
Sent: Wed 1/24/2007 3:18 PM
To: FreeRadius users mailing list
Subject: Re: Proxying based on SSID
Lai Fu Keung wrote:
Normally, I proxy a PEAP request whenever the realm
4:11 PM
To: freeradius-users@lists.freeradius.org
Subject: Re: Proxying based on SSID
I think both are wrong because you must distinguish amog the different
SSIDs that an AP broadcast. It sometimes happens the wireless MAC are
the same for all SSIDs. Only some devices (such as Mikrotik) let
I think you have to use the attribute Stripped-User-Name to authenticate the
user. Date: Wed, 24 Jan 2007 14:21:59 +0800 From: [EMAIL PROTECTED] To:
freeradius-users@lists.freeradius.org Subject: Proxying based on SSID Hi,
Sorry if the questions have been asked. I have done a lot of searches,
Lai Fu Keung wrote:
1. Check the realm, which will set to DEFAULT, as the domain is unknown. The
username is NOT stripped in the DEFAULT realm.
Then add a LOCAL realm of that domain. If that's impossible, use
the hints file to match the [EMAIL PROTECTED] by hand.
2. Then check the
Lai Fu Keung wrote:
Normally, I proxy a PEAP request whenever the realm is unknown to us
(i.e. using the DEFAULT realm without stripping user name). However, for
some SSIDs, I want requests to be handled locally with ldap, independent
of what the realm is (and with the user name stripped).
7 matches
Mail list logo
