cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

215
Views
0
Helpful
2
Replies
Highlighted
Cisco Employee

Push multiple attributes to SQL via ODBC

We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization.  As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL database for proper authorization.  Currently the customer is doing this in Clearpass with the following string:

 

call clearpass_eap_attributes("%{Authentication:Username}", "%{Authentication:Full-Username}", "%{Connection:Client-Mac-Address}", "%{Connection:AP-Mac}", "%{Connection:AP-Name}", "%{Connection:SSID}", "%{Connection:NAD-IP-Address}");

 

The names wrapped inside of %{} are Aruba-isms, but here's a list of IETF radius attribute names and numbers that those equate to:

 

User-Name (1)

NAS-IP-Address (4)

Called-Station-Id (30)

Calling-Station-Id (31)

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

we can only query 1 attribute today. 

please reach out to PM team to know about the roadmap. 

 

Thanks,

Nidhi 

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

Highlighted
Cisco Employee

we can only query 1 attribute today. 

please reach out to PM team to know about the roadmap. 

 

Thanks,

Nidhi 

View solution in original post

Content for Community-Ad