<HTML>
<HEAD>
<TITLE>Re: Defining an Auth-Type based on a realm</TITLE>
</HEAD>
<BODY>
<FONT FACE="Arial"><SPAN STYLE='font-size:9pt'>My question was more of where that configuration should live. I can see that you can do attribute checks in the users file, but I am not sure the realm is being set to any attribute...<BR>
<BR>
I can see in the debug messages:<BR>
<BR>
rad_recv: Access-Request packet from host 127.0.0.1 port 53888, id=132, length=95<BR>
User-Name = "user@realm"<BR>
User-Password = "password!"<BR>
NAS-IP-Address = 127.0.1.1<BR>
NAS-Port = 0<BR>
...<BR>
Tue Oct 12 07:38:54 2010 : Info: [IPASS] No '/' in User-Name = " user@realm", looking up realm NULL<BR>
Tue Oct 12 07:38:54 2010 : Info: [IPASS] No such realm "NULL"<BR>
Tue Oct 12 07:38:54 2010 : Info: ++[IPASS] returns noop<BR>
Tue Oct 12 07:38:54 2010 : Info: [suffix] Looking up realm "realm" for User-Name = " user@realm"<BR>
Tue Oct 12 07:38:54 2010 : Info: [suffix] No such realm "realm"<BR>
Tue Oct 12 07:38:54 2010 : Info: ++[suffix] returns noop<BR>
<BR>
But I never see an attribute being set to the realm. Do I have to explicitly define that somewhere in order to do a check in the users file? Or, is there a better place to do this check (possibly in an IPASS configuration of suffix configuration)? <BR>
<BR>
<BR>
<BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"><B>From: </B>Alan DeKok <<a href="aland@deployingradius.com">aland@deployingradius.com</a>><BR>
<B>Reply-To: </B>FreeRadius users mailing list <<a href="freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><BR>
<B>Date: </B>Tue, 12 Oct 2010 01:08:14 -0400<BR>
<B>To: </B>FreeRadius users mailing list <<a href="freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><BR>
<B>Subject: </B>Re: Defining an Auth-Type based on a realm<BR>
<BR>
Mathew Rowley wrote:<BR>
> Is there a typical way to set an ‘Auth-Type := Kerberos’ when a user is<BR>
> part of a specific realm? For testing purposes, I am able to add this to<BR>
> the ‘users’ file:<BR>
><BR>
> DEFAULT Auth-Type := Kerberos<BR>
><BR>
> But, will need something based on realm in the future.<BR>
<BR>
You can do comparisons on the Realm, too. It's just another attribute.<BR>
<BR>
Alan DeKok.<BR>
-<BR>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><BR>
<BR>
</SPAN></FONT>
</BODY>
</HTML>