Free Radius Custom Attribute

I've been trying to Google something to fit my requirements for 2 weeks and I've had next to null luck.

I'm setting up a Cisco Lab that will be freely available to the public; details can be found at Free CCNA Workbook Lab | Free CCNA Workbook

However, I've ran into a snag. The console server i use; a CM4116 authenticates to a FreeRADIUS box which uses MySQL.

Currently I'm able to create accounts and authenticate successfully and I'm able to get the Expiration attribute to function as intended however I need an attribute that will reject users if the current date and time is not greater than or equal to the value listed for the specific user in the radcheck table if that attribute exist.

Attribute name for example; Start-Date-Time

I currently have a guy working on developing a PHP based schedule application to automate the user registration/timeslot booking and FreeRADIUS db account updates however I need an attribute of this nature to proceed any further.

Does anyone know how to create a custom query module to check rather or not this attribute exist for the authenticating user in the radcheck table and if so is the value listed in the radcheck table for that attribute less than or equal to the current machine date/time.

The sooner I get this stuff working the sooner the lab will be available to everyone to use for free!

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

mgeorge

I was able to get this to work with the assistance of a gentleman named Phil.

Now the development on the Free CCNA Workbook "Free Lab" php schedule application can continue.

For anyone who is interested, I used the following configuration to accomplish this requirement;

raddb/dictionary:
ATTRIBUTE Current-Date 3000 string

raddb/sites-enabled/xx:
authorize {
...
update request {
Current-Time-Date := " %m-%d-%Y"
}
sql
...
}

MySQL radcheck table
+----+

+----+

+
| id | username | attribute | op | value |
+----+

+----+

+
| 5 | test | Current-Date | = | 06-21-2011 |
+----+

+----+

+

If you use the == operator it will not work. The MySQL radcheck table operator has to be either =, >= or <=

efxz

mgeorge wrote: »

I was able to get this to work with the assistance of a gentleman named Phil. Now the development on the Free CCNA Workbook "Free Lab" php schedule application can continue.

For anyone who is interested, I used the following configuration to accomplish this requirement;

raddb/dictionary:
ATTRIBUTE Current-Date 3000 string

raddb/sites-enabled/xx:
authorize {
...
update request {
Current-Time-Date := " %m-%d-%Y"
}
sql
...
}

MySQL radcheck table
+----+
+
+----+
+
| id | username | attribute | op | value |
+----+
+
+----+
+
| 5 | test | Current-Date | = | 06-21-2011 |
+----+
+
+----+
+

If you use the == operator it will not work. The MySQL radcheck table operator has to be either =, >= or <=

Hi Matt!

Could you be more specific with this type of authorization. I try to achieve the same result!

Are you using this just for date specific authorization, and current time module for hour time?

How you authorize user for a specific hour time, not for the day?

Please take a minute to answer