I don't think we can count on all these locations having their own domain name, but we can just make use of a user attribute in ldap instead. -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+clayton.knorr=nuspire.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, February 15, 2017 2:32 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Maximum number of virtual servers?
On Feb 15, 2017, at 2:25 PM, Clayton Knorr <clayton.knorr@nuspire.com> wrote:
We're going to have lots of users from different organizations in one LDAP directory and virtual servers would be a way to have a different basedn when searching for the user accounts for each organization. It isn't a necessity just one option we're looking at.
Have everyone login with their email address. Then, you can qualify the LDAP lookups by domain names. That's a lot easier than the alternative... The main reason to use different virtual servers is because you have wildly different policies for each organization. If the policies are similar and data driven... just put the information in a database, and select it by domain name. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html