Does anyone know of a way to authenticate most users
locally, but redirect some users to another radius server for authentication
based on the login domain name specified by the user? I am using FreeRadius on
a Debian box. Local authentication works properly, but I need to have some
users authenticate from a different system based on the domain they are trying
to log into. Any help is greatly appreciated.
I tried DEFAULT
Suffix =~ "@abc.com$", Auth-Type := Accept and it still tries to
authenticate locally
/etc/radius/users;
# for abc.com domain
DEFAULT
Suffix =~ "@abc.com$", Auth-Type := Accept
Service-Type = Outbound-User,
Cisco-AVPair = "vpdn:ip-addresses=1.2.3.4",
Cisco-AVPair += "vpdn:tunnel-type=l2tp"