topic Re: Push multiple attributes to SQL via ODBC in Network Access Control

Push multiple attributes to SQL via ODBC

blandrum — Wed, 22 May 2019 19:26:54 GMT

We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization. As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL database for proper authorization. Currently the customer is doing this in Clearpass with the following string:

call clearpass_eap_attributes("%{Authentication:Username}", "%{Authentication:Full-Username}", "%{Connection:Client-Mac-Address}", "%{Connection:AP-Mac}", "%{Connection:AP-Name}", "%{Connection:SSID}", "%{Connection:NAD-IP-Address}");

The names wrapped inside of %{} are Aruba-isms, but here's a list of IETF radius attribute names and numbers that those equate to:

User-Name (1)

NAS-IP-Address (4)

Called-Station-Id (30)

Calling-Station-Id (31)

Re: Push multiple attributes to SQL via ODBC

Jason Kunst — Wed, 22 May 2019 19:45:09 GMT

is this the same discussion?

https://community.cisco.com/t5/identity-services-engine-ise/using-odbc-as-an-identity-source-for-guest-portal-authentication/m-p/3860824#M27077

Re: Push multiple attributes to SQL via ODBC

Nidhi — Thu, 23 May 2019 08:34:55 GMT

we can only query 1 attribute today.

please reach out to PM team to know about the roadmap.

Thanks,

Nidhi