Re: access rights for some users ou users groups with

14 Oct 2008

      I've configured my tables as follows : 

mysql> select * from usergroup;
+----+----------+-------------+
| id | UserName | GroupName   |
+----+----------+-------------+
| 13 | st234824 | test_radius |
+----+----------+-------------+

mysql> select * from radcheck;
+----+----------+----------------+----+------------------------------------+
| id | UserName | Attribute      | op | Value                              |
+----+----------+----------------+----+------------------------------------+
|  1 | st234824 | Crypt-Password | := | LqI8nHgSp/pTY                      |
+----+----------+----------------+----+------------------------------------+

mysql> select * from radgroupcheck;
+----+-------------+-----------+----+-------+
| id | GroupName   | Attribute | op | Value |
+----+-------------+-----------+----+-------+
|  4 | test_radius | Auth-Type | := | TLS   |
+----+-------------+-----------+----+-------+

mysql> select * from nas;
+----+---------------+-----------+-------+-------+------------+-----------+-------------+
| id | nasname       | shortname | type  | ports | secret     | community | description |
+----+---------------+-----------+-------+-------+------------+-----------+-------------+
|  6 | 192.168.9.155 | switch    | cisco |  1812 | bonjour    |           |             |
|  9 | 192.168.9.154 | webmail01 | other |  1812 | testing123 |           |             |

Which type of attributes should I use to access from "webmail01", but not "switch" for example ?

thanks

________________________________

De: freeradius-users-bounces+nasr-eddine.badaoui=ratp.fr@lists.freeradius.org de la part de freeradius-users-request@lists.freeradius.org
Date: lun. 13/10/2008 19:30
À: freeradius-users@lists.freeradius.org
Objet : Freeradius-Users Digest, Vol 42, Issue 80

Send Freeradius-Users mailing list submissions to
        freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit
        http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
        freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at
        freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

   1. access rights for some users ou users groups with freeradius
      and mysql (BADAOUI Nasr-Eddine (P))
   2. Re: access rights for some users ou users groups with
      freeradius and    mysql (tnt@kalik.net)
   3. Re: One user - Different Service Type depending on NAS
      (Alan DeKok)
   4. Re: NAS-Identifier (Paul Bartell)
   5. FR2.1.1 Solaris 5.10 x86 32-bit race condition (Chris Howley)
   6. Re: FR2.1.1 Solaris 5.10 x86 32-bit race condition (Alan DeKok)
   7. Authentication ok but not login on a Netopia (Gamaliel Bedolla)
   8. syntax errors on mysql ip pools (Marcelus Trojahn)

----------------------------------------------------------------------

Message: 1
Date: Mon, 13 Oct 2008 13:51:28 +0200
From: "BADAOUI Nasr-Eddine (P)" <nasr-eddine.badaoui@ratp.fr>
Subject: access rights for some users ou users groups with freeradius
        and mysql
To: <freeradius-users@lists.freeradius.org>
Message-ID:
        <E50F5250B1B60045B2B10390D6FFE79462BC7E@EXCHANGEA2.info.ratp>
Content-Type: text/plain; charset="iso-8859-1"

Hi,

I'd like to know how to authorize some users or users's group created in mysql tables can logged only on some mysql's clients, with freeradius.

Mysql's tables are :

nas table for clients
radcheck table for users
radgropucheck table
usergroup table

many thanks