Distinguish RADIUS requests from NAS device

Dave Rummel daverummel at boothcreek.com
Fri Jun 26 17:40:47 CEST 2009


Andrew are you looking to do different groups or are you looking to 
differentiate logging into say a router with standard privileges vs 
enabled privileges ?

Andrew Hall wrote:
> Hi there.
>
> We have a network device using FreeRADIUS 1.x for authentication. This
> RADIUS server in turn queries an LDAP server.
>
> We wish to distinguish between "admin" and "login" requests but are
> struggling to differentiate between the two.
>
> At the moment we identify the device by its NAS address but cannot
> distinguish which type of login request is being made - so cannot then
> choose which LDAP groups to query.
>
> Our only solution so far is to run separate instances of RADIUS and
> direct the network device to each instance per the request type it
> receives.
>
> Can anyone this of another way to distinguish the requests ?
>
> Thanks very much.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>   



More information about the Freeradius-Users mailing list