<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.6000.16544" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">
<DIV>Thanks for everyone's help. I have it working nicely now, but have one more situation I just started testing.</DIV>
<DIV> </DIV>
<DIV>I want to use the same radius servers to authenticate users on a different wireless network though a captive portal to the same eDirectory servers via LDAP.</DIV>
<DIV> </DIV>
<DIV>In order for the captive portal authentication to work, I had to put LDAP back in the authorize section, which breaks all the work I just did to reduce the calls to the eDirectory servers for my other network that uses 802.1X.</DIV>
<DIV> </DIV>
<DIV>Is there a way around this to have both working at the same time?</DIV>
<DIV> </DIV>
<DIV>Thanks,</DIV>
<DIV> </DIV>
<DIV>Nathan</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Nathan P. Hay<BR>Network Engineer<BR>Computer Services<BR>Cedarville University<BR><A href="http://www.cedarville.edu/">www.cedarville.edu</A> <BR><BR>>>> <A.L.M.Buxey@lboro.ac.uk> 11/13/2007 5:36 AM >>><BR>Hi,<BR>> Do I then remove ldap from the authorize section so that it doesn't call<BR>> it every packet? I did a bunch of testing and it seems that I have to<BR>> do that to reduce the number of calls to our eDirectory servers.<BR><BR>yes - only call it from the INNER check. otherwise you are in exactly<BR>the same situation <BR><BR>alan<BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A><BR></DIV></BODY></HTML>