To remember : I want only user1 can access to host1.<br><br>To illustrate it:<br>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; root<br>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; <br>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; ------------------<br>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; <br>&nbsp;&nbsp;&nbsp; &nbsp; hosts&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp; users&nbsp;&nbsp;&nbsp; <br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; |<br>&nbsp;&nbsp;&nbsp; --------&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; ---------- &nbsp;&nbsp; <br>&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; |<br>&nbsp; host1&nbsp;&nbsp;&nbsp; &nbsp;&nbsp; user1&nbsp; user2<br>&nbsp;&nbsp;&nbsp; |<br>&nbsp;&nbsp;&nbsp; |&nbsp; members:<br>&nbsp;&nbsp;&nbsp; |<br>&nbsp;user1<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br><br>I find a possible way.<br>
<br>in radiusd.conf, I put:<br>
groupname_attribute = &quot;cn&quot;<br>
group_membership_filter = (|(&amp;(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&amp;(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))<br><br>In the users file, I put:<br>Ldap-Group == &quot;XXXXX&quot; Auth-Type:= LDAP<br>
<br>XXXXX will be the IP/hostname of the host which try to connect.<br><br>Is there any variable like %{LDAP-UserDN} which could give me this information ??<br><br>thanks for any help<br><br><br>-- <br>KeV<br>