<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">Alan,<br> Could you perhaps give me a hint about how one would go about allowing any user from any system (_unless_ that system is listed for the specific purpose of not allowing anyone to authenticate from it) to authenticate?<br><br> <br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: Alan DeKok <aland@deployingradius.com><br>To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Sent: Thursday, December 21, 2006 11:47:47 AM<br>Subject: Re: Questions from a totally ignorant n00b<br><br><div>Gene Mosley wrote:<br>> Users are authenticating from systems that they should not be<br>>
authenticating from - we need to block authentication on a per system<br>> (IP address) basis, not a per user basis.<br><br> You can do this in FreeRADIUS. Put users into different groups, and<br>block the group from accessing particular systems.<br><br>> Users should be allowed to authenticate from any system that they are<br>> using _except_ a certain, specific list of IP addresses which would<br>> basically be banned/blocked from authenticating.<br><br> This can be done, too.<br><br>> Is this something that FreeRADIUS can do?<br><br> Yes.<br><br>> I just started reading about it - and if nothing else it looks like<br>> exec-program-wait might be used to test the IP address and return an<br>> authentication failure?<br><br> That will work, too, but will be less efficient.<br><br> Alan DeKok.<br>--<br> <a target="_blank"
href="http://deployingradius.com">http://deployingradius.com</a> - The web site of the book<br> <a target="_blank" href="http://deployingradius.com/blog/">http://deployingradius.com/blog/</a> - The blog<br>- <br>List info/subscribe/unsubscribe? See <a target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></div><br></div></div></body></html>