Alan, Thanks! It works, but I can Log "Invalid Login" before delivery IP? Aurelio Em 13/04/2016 16:48, Aurélio de Souza Ribeiro Neto escreveu:
Em 13/04/2016 10:09, Alan DeKok escreveu:
On Apr 13, 2016, at 8:51 AM, Aurélio de Souza Ribeiro Neto <netolistas@mpc.com.br> wrote:
Is it possible to allow access to a different POOL for users who authenticate with invalid login or password?
Only for people who aren't using EAP.
Users who connect with correct credentials would use the POOL according to their groups, and users with login and password invalids would be directed to another POOL? I hope I was clear.
Sure. In the "authenticate" section, do:
authenticate { ... Auth-Type pap { pap { reject = 1 }
if (reject) { update control { Pool-Name := "rejected_pool" }
ok }
}
... }
You'll have to customize it for your system, but the general idea is there.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html