Re: Problems regarding MAC address authentication

--===============0488294612==
Content-Type: multipart/alternative;
boundary="----=_Part_122829_11319664.1171523484970"

------=_Part_122829_11319664.1171523484970
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

ldap queries are working fine, below is the log..

Plz just explain the overview of how to enable mac address based
authentication where all the three parameters (uid, userPassword and
radiusCallingStationId are matched from the ldap database)..

PS: A paper presentation contest is to begin from tomorrow (www.*prastuti*.org)
in our college.. I will be highly grateful if i could provide wifi access
during the event... (at present am doing auth based on uid+password and need
to extend it to mac address).. plz help

12:38:37@jindal # ldapsearch -x -h 10.9.1.250 -D "uid=Manager,dc=itweb" -w
secret123 -LLL -vv -b "dc=itweb" "uid=ashimece"
ldap_initialize( ldap://10.9.1.250 )
filter: uid=ashimece
requesting: All userApplication attributes
dn: uid=ashimece,cn=Ece08,cn=Students,dc=itweb
uid: ashimece
userPassword:: amluZGFs
objectClass: account
objectClass: simpleSecurityObject
objectClass: top
objectClass: radiusprofile
cn: Ashim Dutta
radiusCallingStationId: 00-90-4B-ED-AB-52

12:38:58@jindal # ldapsearch -x -h 10.9.1.250 -D "uid=Manager,dc=itweb" -w
secret123 -LLL -vv -b "dc=itweb" "radiusCallingStationId=00-90-4B-ED-AB-52"
ldap_initialize( ldap://10.9.1.250 )
filter: radiusCallingStationId=00-90-4B-ED-AB-52
requesting: All userApplication attributes
dn: uid=ashimece,cn=Ece08,cn=Students,dc=itweb
uid: ashimece
userPassword:: amluZGFs
objectClass: account
objectClass: simpleSecurityObject
objectClass: top
objectClass: radiusprofile
cn: Ashim Dutta
radiusCallingStationId: 00-90-4B-ED-AB-52


On 2/13/07, Alan DeKok <aland@deployingradius.com> wrote:
>
> Shobhit Jindal wrote:
> > how to implement the above?(this is the question that eludes me)
> >
> > PS: i would really like to know why filtering the ldap database using
> > uid works and fails while using radiusCallingStationId
>
> See your LDAP documentation.
>
> Run LDAP queries by hand until you get the result you want, and then
> configure the server to use those queries.
>
> Alan DeKok.
> --
> http://deployingradius.com - The web site of the book
> http://deployingradius.com/blog/ - The blog
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>



--
Registerd Linux User #426561
-
Shobhit Jindal
B.Tech. Part-III,
Department Of Electronics Engineering, ITBHU
INDIA

------=_Part_122829_11319664.1171523484970
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

ldap queries are working fine, below is the log..<br><br>Plz just explain the overview of how to enable mac address based authentication where all the three parameters (uid, userPassword and radiusCallingStationId are matched from the ldap database)..
<br><br>PS: <font size="-1"><span class="a">A paper presentation contest is to begin from tomorrow (www.<b>prastuti</b>.org) in our college.. I will be highly grateful if i could provide wifi access during the event... (at present am doing auth based on uid+password and need to extend it to mac address).. plz help
<br><br></span></font>12:38:37@jindal # ldapsearch -x -h <a href="http://10.9.1.250">10.9.1.250</a> -D &quot;uid=Manager,dc=itweb&quot; -w secret123 -LLL -vv -b &quot;dc=itweb&quot; &quot;uid=ashimece&quot;<br>ldap_initialize( ldap://10.9.1.250 )
<br>filter: uid=ashimece<br>requesting: All userApplication attributes<br>dn: uid=ashimece,cn=Ece08,cn=Students,dc=itweb<br>uid: ashimece<br>userPassword:: amluZGFs<br>objectClass: account<br>objectClass: simpleSecurityObject
<br>objectClass: top<br>objectClass: radiusprofile<br>cn: Ashim Dutta<br>radiusCallingStationId: 00-90-4B-ED-AB-52<br><br>12:38:58@jindal # ldapsearch -x -h <a href="http://10.9.1.250">10.9.1.250</a> -D &quot;uid=Manager,dc=itweb&quot; -w secret123 -LLL -vv -b &quot;dc=itweb&quot; &quot;radiusCallingStationId=00-90-4B-ED-AB-52&quot;
<br>ldap_initialize( ldap://10.9.1.250 )<br>filter: radiusCallingStationId=00-90-4B-ED-AB-52<br>requesting: All userApplication attributes<br>dn: uid=ashimece,cn=Ece08,cn=Students,dc=itweb<br>uid: ashimece<br>userPassword:: amluZGFs
<br>objectClass: account<br>objectClass: simpleSecurityObject<br>objectClass: top<br>objectClass: radiusprofile<br>cn: Ashim Dutta<br>radiusCallingStationId: 00-90-4B-ED-AB-52<br><br><br><div><span class="gmail_quote">On 2/13/07,
<b class="gmail_sendername">Alan DeKok</b> &lt;<a href="mailto:aland@deployingradius.com">aland@depl oyingradius.com</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Shobhit Jindal wrote:<br>&gt; how to implement the above?(this is the question that eludes me)<br>&gt;<br>&gt; PS: i would really like to know why filtering the ldap database using<br>&gt; uid works and fails while using radiusCallingStationId
<br><br>&nbsp;&nbsp;See your LDAP documentation.<br><br>&nbsp;&nbsp;Run LDAP queries by hand until you get the result you want, and then<br>configure the server to use those queries.<br><br>&nbsp;&nbsp;Alan DeKok.<br>--<br>&nbsp;&nbsp;<a href="http://deployingradius.com">
http://deployingradius.com</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; - The web site of the book<br>&nbsp;&nbsp;<a href="http://deployingradius.com/blog/">http://deployingradius.com/blog/</a> - The blog<br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">
http://www.freeradius.org/list/users.html</a><br></blockquote></div><br><br clear="all"><br>-- <br>Registerd Linux User #426561<br>-<br>Shobhit Jindal<br>B.Tech. Part-III, <br>Department Of Electronics Engineering, ITBHU<br>
INDIA

------=_Part_122829_11319664.1171523484970--

--===============0488294612==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--===============0488294612==--