Gary Gatten wrote:
I have several different type's of clients/NAS's that will be using FR as the Front End to perform AAA - mostly Authentication, but the Author and Acct are close behind.
Use virtual servers. See raddb/sites-available/README
Anyway, each of these clients need to perform slightly different backend queries to determine if Authenticate should pass or fail:
So, how do I go about this?
Configure completely different virtual servers, even if the contents of those servers are mostly the same. This lets you work like each type of NAS has it's own RADIUS server, with it's own policies.
I'm currently using NTLM_Auth and that's all working fine, I'm just not sure how to say in FR config: if request of type 1, run this NTLM_Auth command and check for this group; If request of type 2 run this other NTLM_Auth command and check for this other group.
You'll also need to configure different instances of the MSCHAP module, too. Alan DeKok.