<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16544" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have Freeradius 1.1.6 running on FreeBSD. I
authenticate users from a users file, not from a database. I have three default
realms setup in the realms file and at the top of the users file like
so:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV><FONT face=Arial size=2>
<DIV><BR>DEFAULT Realm ==
jellico.net<BR> Service-Type =
Framed-User,<BR> Framed-Protocol =
PPP,<BR> Framed-IP-Address =
255.255.255.254,<BR> Framed-IP-Netmask
= 255.255.255.255,<BR> Framed-Routing
= None,<BR> Framed-Compression =
None,<BR> Framed-MTU =
1500,<BR> Fall-Through = 1</DIV>
<DIV> </DIV>
<DIV>DEFAULT Realm == jellico.com<BR>
Service-Type = Framed-User,<BR>
Framed-Protocol = PPP,<BR>
Framed-IP-Address =
255.255.255.254,<BR> Framed-IP-Netmask
= 255.255.255.255,<BR> Framed-Routing
= None,<BR> Framed-Compression =
None,<BR> Framed-MTU =
1500,<BR> Fall-Through = 1<BR></DIV>
<DIV>Then a list of users follows. Here's one example:</DIV>
<DIV> </DIV>
<DIV>lisa Auth-Type = Local, Password
== xxxxxxx<BR> Service-Type =
Framed-User,<BR> Framed-Protocol =
PPP,<BR> Framed-IP-Address =
255.255.255.254,<BR> Framed-IP-Netmask
= 255.255.255.255,<BR> Framed-Routing
= None,<BR> Framed-Compression =
None,<BR> Framed-MTU =
1500,<BR> Slipstream-Auth =
"true"</DIV>
<DIV> </DIV>
<DIV>The way things are setup now, any user can log in with any of the realms I
have defined. For example, I (username lisa) could login as <A
href="mailto:lisa@jellico.com">lisa@jellico.com</A> and then turn around and
login as <A
href="mailto:lisa@jellico.net">lisa@jellico.net</A> My boss
would like me to restrict this so that (for example) lisa could log in as
<A href="mailto:lisa@jellico.com">lisa@jellico.com</A> but not <A
href="mailto:lisa@jellico.net">lisa@jellico.net</A></DIV>
<DIV> </DIV>
<DIV>With my setup, can I do this easily (or at all)? If this is possible,
please give me some idea of how to go about doing this.</DIV>
<DIV> </DIV>
<DIV>Thanks,</DIV>
<DIV> </DIV>
<DIV>Lisa Casey</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></FONT></BODY></HTML>