Hi, I have a dial-up authentication and a ADSL authentication in my freeradius. the configuration is something like that: /etc/raddb/clients.conf # for the dial-up authentication: client xxx.xxx.xx.x { secret = secret shortname = server0.example.com nastype = other } client xxx.xxx.xx.x { secret = secret shortname = server1.example.com nastype = other } # for the adsl authentication: client yyy.yyy.yy.y { secret = secret shortname = server00.example.com nastype = other } client yyy.yyy.yy.y { secret = secret shortname = server01.example.com nastype = other } client yyy.yyy.yy.y { secret = secret shortname = server02.example.com nastype = other } client yyy.yyy.yy.y { secret = secret shortname = server03.example.com nastype = other } I also have 2 groups, the dialup group and the adsl group. I would like to make adsl user to connect in both services and dial-up groups to connect only in dialup. I've tryed somethings in /etc/raddb/huntgroups: dialup NAS-IP-Address == xxx.xxx.xx.x Group = dialup adsl NAS-IP-Address == xxx.xxx.xx.x Group = adsl adsl NAS-IP-Address == yyy.yyy.yy.y Group = adsl but it seems not to work. Any ideia? TIA, Joao Reis.
Is your FreeRADIUS using an SQL backend? If so you will need to change the Group == "adsl" to SQL-Group == "adsl" in the huntgroup file. joao reis - cyberweb wrote:
Hi,
I have a dial-up authentication and a ADSL authentication in my freeradius.
the configuration is something like that:
/etc/raddb/clients.conf
# for the dial-up authentication:
client xxx.xxx.xx.x { secret = secret shortname = server0.example.com nastype = other }
client xxx.xxx.xx.x { secret = secret shortname = server1.example.com nastype = other }
# for the adsl authentication:
client yyy.yyy.yy.y { secret = secret shortname = server00.example.com nastype = other }
client yyy.yyy.yy.y { secret = secret shortname = server01.example.com nastype = other }
client yyy.yyy.yy.y { secret = secret shortname = server02.example.com nastype = other }
client yyy.yyy.yy.y { secret = secret shortname = server03.example.com nastype = other }
I also have 2 groups, the dialup group and the adsl group. I would like to make adsl user to connect in both services and dial-up groups to connect only in dialup.
I've tryed somethings in /etc/raddb/huntgroups:
dialup NAS-IP-Address == xxx.xxx.xx.x Group = dialup adsl NAS-IP-Address == xxx.xxx.xx.x Group = adsl adsl NAS-IP-Address == yyy.yyy.yy.y Group = adsl
but it seems not to work. Any ideia?
TIA,
Joao Reis.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Richard Marriner II Maingear.Net Sr. Network Consultant I.T. Consulting richard@maingear.net www.maingear.net
Hi, It "kinda" work. NAS-IP-Address == xxx.xxx.xx.x -> where xxx.xxx.xx.x is a client ip, right? people in dialup group still can log in the adsl service, did I miss somthing? my groups are: dialup Auth-Type := Accept adsl Auth-Type := Local the new rules in huntgruops are: dialup NAS-IP-Address == xxx.xxx.xx.x SQL-Group == dialup, SQL-Group == adsl dialup NAS-IP-Address == xxx.xxx.xx.y SQL-Group == dialup, SQL-Group == adsl adsl NAS-IP-Address == yyy.yyy.yy.y SQL-Group == adsl adsl NAS-IP-Address == yyy.yyy.yy.x SQL-Group == adsl adsl NAS-IP-Address == xyx.yyy.yy.y SQL-Group == adsl adsl NAS-IP-Address == xyx.yyy.yy.x SQL-Group == adsl adsl NAS-IP-Address == xxx.yyy.yy.y SQL-Group == adsl adsl NAS-IP-Address == xxx.yyy.yy.x SQL-Group == adsl TIA, Joao Reis. On Wed, 2006-01-04 at 10:10 -0800, Richard Marriner II wrote:
Is your FreeRADIUS using an SQL backend? If so you will need to change the Group == "adsl" to SQL-Group == "adsl" in the huntgroup file.
joao reis - cyberweb wrote:
Hi,
I have a dial-up authentication and a ADSL authentication in my freeradius.
the configuration is something like that:
/etc/raddb/clients.conf
# for the dial-up authentication:
client xxx.xxx.xx.x { secret = secret shortname = server0.example.com nastype = other }
client xxx.xxx.xx.x { secret = secret shortname = server1.example.com nastype = other }
# for the adsl authentication:
client yyy.yyy.yy.y { secret = secret shortname = server00.example.com nastype = other }
client yyy.yyy.yy.y { secret = secret shortname = server01.example.com nastype = other }
client yyy.yyy.yy.y { secret = secret shortname = server02.example.com nastype = other }
client yyy.yyy.yy.y { secret = secret shortname = server03.example.com nastype = other }
I also have 2 groups, the dialup group and the adsl group. I would like to make adsl user to connect in both services and dial-up groups to connect only in dialup.
I've tryed somethings in /etc/raddb/huntgroups:
dialup NAS-IP-Address == xxx.xxx.xx.x Group = dialup adsl NAS-IP-Address == xxx.xxx.xx.x Group = adsl adsl NAS-IP-Address == yyy.yyy.yy.y Group = adsl
but it seems not to work. Any ideia?
TIA,
Joao Reis.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hmm.. this looks like it should work. I am comparing it with my configuration and it looks similar. I am checking for a Called-Station-ID instead of NAS-IP-Address, but it should have similar functionality. Try running radiusd -X and posting the results after you try to login as a dialup user. This might sound pretty common sense but you do have users with the proper group in the "usergroup" table right?
dialup Auth-Type := Accept adsl Auth-Type := Local
Try changing dialup to := Local ??? Here is my configuration that IS working properly for us; huntgroups; ----------- dialbb Called-Station-ID =~ ".*0804" SQL-Group == DBB radcheck table; --------------- id UserName Attribute op Value 1 testuser Password == passwd123 2 nodbbuser Password == passwd321 usergroup table; ---------------- id UserName GroupName 1 testuser DBB 2 nodbbuser DIAL Maybe if somebody else sees something I am missing they can point it out. I am not an expert so it is likely "I am" missing something. Good Luck!
my groups are:
dialup Auth-Type := Accept adsl Auth-Type := Local
the new rules in huntgruops are:
dialup NAS-IP-Address == xxx.xxx.xx.x SQL-Group == dialup, SQL-Group == adsl dialup NAS-IP-Address == xxx.xxx.xx.y SQL-Group == dialup, SQL-Group == adsl
adsl NAS-IP-Address == yyy.yyy.yy.y SQL-Group == adsl adsl NAS-IP-Address == yyy.yyy.yy.x SQL-Group == adsl adsl NAS-IP-Address == xyx.yyy.yy.y SQL-Group == adsl adsl NAS-IP-Address == xyx.yyy.yy.x SQL-Group == adsl adsl NAS-IP-Address == xxx.yyy.yy.y SQL-Group == adsl adsl NAS-IP-Address == xxx.yyy.yy.x SQL-Group == adsl
TIA,
Joao Reis.
On Wed, 2006-01-04 at 10:10 -0800, Richard Marriner II wrote:
Is your FreeRADIUS using an SQL backend? If so you will need to change the Group == "adsl" to SQL-Group == "adsl" in the huntgroup file.
participants (3)
-
joao reis - cyberweb -
Rich Marriner -
Richard Marriner II