multiple 'users' files possible?
Hi list, is it possible with freeradius to use multiple 'users' files for authentication? For example having users devided by department and different administrators are allowed to edit only their own users file? My customer requests to use text files instead of a database... I know that a database would be the more professional solution... *sigh* Cheers Arne -- Arne Götje (高盛華) <arne@linux.org.tw> PGP/GnuPG key: 1024D/685D1E8C Fingerprint: 2056 F6B7 DEA8 B478 311F 1C34 6E9F D06E 685D 1E8C Key available at wwwkeys.pgp.net. Encrypted e-mail preferred.
Arne Götje (高盛華) wrote:
Hi list,
is it possible with freeradius to use multiple 'users' files for authentication? For example having users devided by department and different administrators are allowed to edit only their own users file?
My customer requests to use text files instead of a database... I know that a database would be the more professional solution... *sigh*
Cheers Arne
You will find a line like below in radius.conf. Add another to your hearts content. I haven't ever done this for users but it works for sql and other files so I can't imagine why it wouldn't work for users file. This is found in the modules section. files { usersfile = ${confdir}/users
On Wednesday 23 November 2005 12:18, Lewis Bergman wrote:
Arne Götje (高盛華) wrote:
Hi list,
is it possible with freeradius to use multiple 'users' files for authentication? For example having users devided by department and different administrators are allowed to edit only their own users file?
My customer requests to use text files instead of a database... I know that a database would be the more professional solution... *sigh*
Cheers Arne
You will find a line like below in radius.conf. Add another to your hearts content. I haven't ever done this for users but it works for sql and other files so I can't imagine why it wouldn't work for users file. This is found in the modules section. files { usersfile = ${confdir}/users
This is exactly my question whether this will work or the second entry will just overwrite the first one. Cheers Arne -- Arne Götje (高盛華) <arne@linux.org.tw> PGP/GnuPG key: 1024D/685D1E8C Fingerprint: 2056 F6B7 DEA8 B478 311F 1C34 6E9F D06E 685D 1E8C Key available at wwwkeys.pgp.net. Encrypted e-mail preferred.
Arne Götje (高盛華) wrote:
You will find a line like below in radius.conf. Add another to your hearts content. I haven't ever done this for users but it works for sql and other files so I can't imagine why it wouldn't work for users file. This is found in the modules section. files { usersfile = ${confdir}/users
This is exactly my question whether this will work or the second entry will just overwrite the first one. Maybe this is a stupid question, but since you knew exactly what *might* work, have you tried it? It takes about 10 minutes to setup a test radius server if you don't want to mess with your prduction one. Give it a shot and let us all know.
On Wednesday 23 November 2005 13:50, Lewis Bergman wrote:
This is exactly my question whether this will work or the second entry will just overwrite the first one.
Maybe this is a stupid question, but since you knew exactly what *might* work, have you tried it? It takes about 10 minutes to setup a test radius server if you don't want to mess with your prduction one. Give it a shot and let us all know.
I tested it with my production server now... it turns out, that it does not work. Only the first line in the radius.conf file will be taken, the second one ignored. So, I have to merge the files and find another solution... Cheers Arne -- Arne Götje (高盛華) <arne@linux.org.tw> PGP/GnuPG key: 1024D/685D1E8C Fingerprint: 2056 F6B7 DEA8 B478 311F 1C34 6E9F D06E 685D 1E8C Key available at wwwkeys.pgp.net. Encrypted e-mail preferred.
Arne Götje (高盛華) wrote:
On Wednesday 23 November 2005 13:50, Lewis Bergman wrote:
This is exactly my question whether this will work or the second entry will just overwrite the first one.
Maybe this is a stupid question, but since you knew exactly what *might* work, have you tried it? It takes about 10 minutes to setup a test radius server if you don't want to mess with your prduction one. Give it a shot and let us all know.
I tested it with my production server now... it turns out, that it does not work. Only the first line in the radius.conf file will be taken, the second one ignored.
So, I have to merge the files and find another solution... Good to know. Maybe the $INCLUDE method? I have seen that used in the dictionary files so I would think it would work in users as well.
SO, use the default users file with a few $INCLUDE 's that pull in your populated users files. Worth a shot anyway.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Arne Götje (高盛華) -
Lewis Bergman