We are looking for a way to pass multiple RADIUS attributes to an external ODBC (SQL) server for authentication / authorization. As of right now, we are only able to send the username which greatly limits our ability to properly query the SQL database for proper authorization. Currently the customer is doing this in Clearpass with the following string:
call clearpass_eap_attributes("%{Authentication:Username}", "%{Authentication:Full-Username}", "%{Connection:Client-Mac-Address}", "%{Connection:AP-Mac}", "%{Connection:AP-Name}", "%{Connection:SSID}", "%{Connection:NAD-IP-Address}");
The names wrapped inside of %{} are Aruba-isms, but here's a list of IETF radius attribute names and numbers that those equate to:
User-Name (1)
NAS-IP-Address (4)
Called-Station-Id (30)
Calling-Station-Id (31)
