Override User-Name in Access-Accept

Hi,

I want to know if its possible to over ride the user-name attribute in a radius setup.

In this scenario I have many users connecting via Hotspot/RADIUS.

I use mac-cookie & cookie for “seemless” relogins.

However if the account (on the radius side) has been denied (for lack of payment etc) then the mac-cookie and cookie based logins do not work and the user is forced to signing again, which is becoming more and more of an issue since most popular sites no use encryption (https).

What I want to do is extend my setup so that MAC authentication also takes place, so when the username comes in as a mac address, my RADIUS server will do a lookup and see if it finds a user who is “bound” to that mac address.

What I then want to do is in the access-accept send some sort of “MT-username-overridge=RealUsername” so that the user is not sitting as the “MAC Address” but rather as the “username” of the user.

Possible?