Bug 57069 – Support MAC auth with computer objects and VLAN-ID assignment

Bug 57069 - Support MAC auth with computer objects and VLAN-ID assignment


Summary:	Support MAC auth with computer objects and VLAN-ID assignment

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Radius
Version:	UCS 5.0
Hardware:	Other All

Importance:	P5 normal (vote)
Target Milestone:	UCS 5.0-7-errata
Assigned To:	Iván.Delgado
QA Contact:	Christian Castens

URL:	https://git.knut.univention.de/univen...
Keywords:

Depends on:	56060
Blocks:
	Show dependency tree / graph

Reported:	2024-02-19 16:40 CET by Dirk Wiesenthal
Modified:	2024-03-27 13:56 CET (History)
CC List:	8 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	4: A User would return the product
User Pain:	0.091
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dirk Wiesenthal

2024-02-19 16:40:07 CET

The feature works, but not for all shape and forms a MAC addresses. Different switches have MAC addresses with different separators.

We should support all MAC addresses via a regular expression. Or some kind of canonicalization.

+++ This bug was initially created as a clone of Bug #56060 +++

...
Please also note that this works when the MAC address is transmitted from the client in a certain format (":" as separator). On a Cisco 2690 switch with IOS 15.x this can be achieved by configuring "mab request format attribute 1 groupsize 2 separator :". 
...

Comment 2 Iván.Delgado

2024-03-25 11:34:24 CET

univention-radius.yaml
e5312560bf73 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

univention-radius (7.0.7-1)
e5312560bf73 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

ucs-test (10.0.21-19)
e5312560bf73 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

Comment 3 Iván.Delgado

2024-03-25 11:39:23 CET

Package: univention-radius
Version: 7.0.7-1
Branch: ucs_5.0-0
Scope: errata5.0-7

Package: ucs-test
Version: 10.0.21-19
Branch: ucs_5.0-0
Scope: errata5.0-7

Comment 4 Iván.Delgado

2024-03-26 14:29:20 CET

univention-radius.yaml
2c1a9e854e5f | fix(radius): rename canonicalization to prevent functions with the same name with the .debian file

univention-radius (7.0.7-2)
2c1a9e854e5f | fix(radius): rename canonicalization to prevent functions with the same name with the .debian file

Package: univention-radius
Version: 7.0.7-2
Branch: ucs_5.0-0
Scope: errata5.0-7

Comment 5 Christian Castens

2024-03-27 12:24:01 CET

QA:
  OK: advisories
  OK: support for other separators in MAC addresses
  OK: build 5.0, 5.1, 5.2
  OK: new test

Comment 6 Iván.Delgado

2024-03-27 13:18:04 CET

5.2
univention-radius (9.0.6)
9331065ccb22 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

ucs-test (12.0.29)
9331065ccb22 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

5.1

univention-radius (8.0.9)
3bfabda09272 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

ucs-test (11.0.29)
3bfabda09272 | Bug #57069: Support MAC auth with computer objects and VLAN-ID assignment

Comment 7 Christian Castens

2024-03-27 13:56:40 CET

<https://errata.software-univention.de/#/?erratum=5.0x1011>