<html><body>
<p><font size="2" face="sans-serif">Ok thanks for the reply.</font><br>
<font size="2" face="sans-serif">I'm now sure that the best way for us is MAC Address filtering.</font><br>
<br>
<font size="2" face="sans-serif">Have a good day.</font><br>
<br>
<font size="2" face="sans-serif">Nicolas CLO</font>
<ul style="padding-left: 4pt"></ul>
<br>
<font size="2" face="sans-serif">-----------------------------------------------------------Original mail-----------------------------------------------------------</font><br>
<br>
<tt><font size="2">nicolas.clo@ricoh-industrie.fr wrote:<br>
> We want two authorization in the same times, for example, to ensure that<br>
> user not used his iPhone with his DOMAIN/UserName account.<br>
<br>
That is fairly vague. You're working with computers. Be specific.<br>
<br>
WHAT is in an Access-Request when they login using a desktop?<br>
<br>
WHAT is in an Access-Request when they login using their phone?<br>
<br>
HOW are the two requests different?<br>
<br>
Once you know that, it should be easy to create rules which can<br>
distinguish one from the other. And then apply different rules to each one.<br>
<br>
> Mac Authorization is not a good way for us ( Too restrictive to keep up<br>
> to date )<br>
> Authorization by certificat too because we have a lot of hosts which<br>
> doesn't support that.<br>
<br>
You're limited by what is in the Access-Request. If the only<br>
difference between a desktop and iPhone is a MAC address, too bad.<br>
Computers aren't magic.<br>
<br>
My guess is that the only thing which will really work is MAC address<br>
filtering. I'd suggest finding a way to make it manageable.<br>
<br>
Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See </font></tt><tt><font size="2"><a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></font></tt><tt><font size="2"><br>
</font></tt><br>
</body></html>