cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
543
Views
0
Helpful
2
Replies

Push multiple attributes to SQL via ODBC

blandrum
Cisco Employee
Cisco Employee

We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization.  As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL database for proper authorization.  Currently the customer is doing this in Clearpass with the following string:

 

call clearpass_eap_attributes("%{Authentication:Username}", "%{Authentication:Full-Username}", "%{Connection:Client-Mac-Address}", "%{Connection:AP-Mac}", "%{Connection:AP-Name}", "%{Connection:SSID}", "%{Connection:NAD-IP-Address}");

 

The names wrapped inside of %{} are Aruba-isms, but here's a list of IETF radius attribute names and numbers that those equate to:

 

User-Name (1)

NAS-IP-Address (4)

Called-Station-Id (30)

Calling-Station-Id (31)

1 Accepted Solution

Accepted Solutions

Nidhi
Cisco Employee
Cisco Employee

we can only query 1 attribute today. 

please reach out to PM team to know about the roadmap. 

 

Thanks,

Nidhi 

View solution in original post

2 Replies 2

Nidhi
Cisco Employee
Cisco Employee

we can only query 1 attribute today. 

please reach out to PM team to know about the roadmap. 

 

Thanks,

Nidhi 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: