Authenticate users from multiple realms on the same NAS

Scott Lambert lambert at lambertfam.org
Thu Aug 10 23:13:02 CEST 2006


Hi,

I've been using GNU-RADIUS and asked this question on the GNU-RADIUS
list last week but didn't get any responses.

The ISP I work for has recently aquired two other local ISPs.  None of
the ISPs have their customers setup to authenticate with username at realm.

I need to merge dial-up numbers and bring the DSL aggregation together
in order to reduce costs.  That means, I will have potentially three
users with the username of "bob" trying to login on the same NAS box
with no way to tell which one they are other than the password the user
supplies.  The NAS address and everything else I can think of will be
the same for all users. (we lack caller-id features).

Is it possible to setup radius to authenticate these users?  I'm willing
to switch RADIUS servers if someone has a nifty module that makes magic
happen.

I've been skimming through the FreeRADIUS mailing list and trying to
search google for pointers on how to accomplish this.  Unfortunately,
the search terms I have been trying are pretty much useless. "multiple
realms", "multiple domains" combined with or without "one NAS", "same
NAS" ...

If anyone has pointers to documentation that tells me why it can't be
done or how to do it, or even a "hey stupid, it's not that complicated",
I would appreciate the help.

-- 
Scott Lambert                    KC5MLE                       Unix SysAdmin
lambert at lambertfam.org




More information about the Freeradius-Users mailing list