<br><div><div style="font-size:13.3px;font-family:Verdana, Arial, Helvetica, sans-serif"><img src="http://p1.wisestamp.com/pixel.png?p=mozilla&v=2.9.5&t=1318858571679&u=9761cb9b0c4ca423" height="1" width="1"></div>
</div><br><br><div class="gmail_quote">2011/10/4 Arran Cudbard-Bell <span dir="ltr"><<a href="mailto:a.cudbardb@freeradius.org" target="_blank">a.cudbardb@freeradius.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word"><br><div><div><div>On 4 Oct 2011, at 13:32, Alejandro Gandara wrote:</div><br><blockquote type="cite">Hi list,<br><br>Im using freeradius 2.1.10 with ldap and I have a doubt. <br>
<br>Im testing radius with two NAS , first one an openvpn service and the other one is a switch Procurve. <br><br>My question is the following:<br>
<br> Can I configure the openvpn nas to read some attribute from the ldap ( as framedipaddress) and at the same time configure switch procurve to read the attribute pool-name from the radius?<br> How can I tell freeradius which attribute read for each nas?<br>
<br>For example: <br><br>User1 connect trhough openvpn so it will get the ip provided from framedipaddress attribute.<br>User 1 disconnect openvpn<br>User 1 connect with wired connection so it will get the IP provided for ippool after read poolname attribute from ldap.<br>
</blockquote><div><br></div></div><div>Sure...</div><div><br></div><div>sites-available/default</div><div><br></div><div>authorize {</div><div><span style="white-space:pre-wrap"> </span>if(Client-shortname == 'openvpn'){</div>
<div><span style="white-space:pre-wrap"> </span>update reply {</div><div><span style="white-space:pre-wrap"> </span>Framed-IP-Address := "%{ldap:my ldap query}"</div><div><span style="white-space:pre-wrap"> </span>}</div>
<div><span style="white-space:pre-wrap"> </span>}</div><div><span style="white-space:pre-wrap"> </span>else {</div><div><span style="white-space:pre-wrap"> </span>update reply {</div><div><span style="white-space:pre-wrap"> </span>My-Other-Attribute := "%{ldap:my ldap query}"</div>
<div><span style="white-space:pre-wrap"> </span>}</div><div><span style="white-space:pre-wrap"> </span>}</div><div>}</div><div><br></div></div></div></blockquote><div>I' ve tried this way. But It didnt resolv my problem.<br>
if(NAS-Port-Type == 'Virtual'){<br> update reply {<br> Framed-IP-Address := "%{RadiusFramedIPAddress}"<br> }<br> }<br><br>This step goes right, but for exemple<br>
<br>Client Mike.<br>It has 2 attributes in LDAP used by Radius.<br><br>RadiusFramedIPAddress = x.x.x.x<br>PoolName = Admin.<br><br>If client connect against openvpn it has to take RadiusFramedIPAddress but if it connects through the switch He will take the IP provided for the pool Admin.<br>
<br>The problem is the next one: Pool override RadiusFramedIPAddress or viceversa. I need use only one of them never both at same time.<br><br>Any solutions?<br><br><br><br>Thanks for all and sorry. Im asking too many things.<br>
<br></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex">
<div style="word-wrap:break-word"><div><div></div><div>clients.conf </div><div><br></div><div>client <foo ip> {</div><div><span style="white-space:pre-wrap"> </span>shortname = openvpn</div><div>}</div><div><br></div>
<div><br></div></div><div>
<span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><div style="word-wrap:break-word">
<span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><div style="word-wrap:break-word">
Arran Cudbard-Bell<br><a href="mailto:a.cudbardb@freeradius.org" target="_blank">a.cudbardb@freeradius.org</a><br><br>Betelwiki, Betelwiki, Betelwiki....<span> </span><a href="http://wiki.freeradius.org/" target="_blank">http://wiki.freeradius.org/</a> !</div>
</span></div></span></span>
</div>
<br></div><br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br></blockquote></div><br>