Allowing user from one realm but not another

Jeff A jeffa at globalco.net
Sun Feb 14 15:11:14 CET 2010


Your idea is best.
I think I will modify, but for a work around till I get a chance to get
everything turned around.
I will use Alan's example..

My question is this
Can his example contain more than one realm to reject between the quotes?

bob	Realm != "foo.net", Auth-Type := Reject

Jeff




-----Original Message-----
From: freeradius-users-bounces+jeffa=globalco.net at lists.freeradius.org
[mailto:freeradius-users-bounces+jeffa=globalco.net at lists.freeradius.org] On
Behalf Of Fajar A. Nugraha
Sent: Sunday, February 14, 2010 9:04 AM
To: FreeRadius users mailing list
Subject: Re: Allowing user from one realm but not another

On Sun, Feb 14, 2010 at 8:23 PM, Jeff A <jeffa at globalco.net> wrote:
> I strip the realm off cause backend billing that creates the users file is
> rodopi, and

So how would you know which user is supposed to be in which realm if
the backend doesn't supply that?
If it were me, I'd modify the billing program to create users with
realm. Also, I'd use database backend to store users.

But hey, ultimately it's your choice. If you're fine with editing user
file then Alan's example should work.

-- 
Fajar
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list