That gives me a good place to start. Sounds so much easier to manage. Much Thanks! -Richard ________________________________ From: Craig Campbell <craig.campbell@ccraft.ca> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Wed, March 16, 2011 2:44:01 PM Subject: Re: same username different password on different NAS Sound like a configuration (a job for :> ) "realms". Each location would be a different realm, so the seemingly overlapping username "manger" would in fact be a unique "manager@realm-X". Thoughts? -craig On Wednesday, March 16, 2011, Richard Thornton <rthornt@yahoo.com> wrote:
I am just learning about freeradius now, and would like to see if I can use it to manage access and logging for users at a few hundred locations. Each remote office has between 1 and 50 users, and at first glance freeradius will do the job, but I just noticed a problem with overlapping usernames. I am not sure if I need to use virtual servers, or if there is a better / easier way.
The problem is that each location may have a user with the same login name as a different location. For a simple example, each site could have a login of "manager", but the manager username at each site would probably pair up with a different password.
Without using virtual servers, is there a way to link the username "manager" to the NAS name or IP of the location? I'm picturing something like the radcheck table containing an additional field for NAS such that freeradius would key off the combined of NAS address and username fields, rather than just the username field.
I am not opposed to using virtual servers if that is a better idea, but I'm worried about the overhead of several hundred of them... Any ideas or pointers to docs would be appreciated.
-Richard
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html