Matching Realm names only.
Hi. I'm setting up a LAC for L2TP tunneling users to a remote LNS. On the LAC side I want it to obtain the tunneling parameters only based on the realm. What would be the simplest way to setup FreeRADIUS to only match the realm and return tunneling attributes. If the realm is not configured, then reject the authentication ? Is it possible to match the Realm in the users file like: DEFAULT Realm == "dsl.myisp.com" Service-Type = Framed-User, Tunnel-Type = L2TP, Tunnel-Server-Endpoint = "X.X.X.X", Tunnel-Medium-Type = IP Doesn't seem to work, do I need to include Auth-Type or anything else ? Thanx Paul
Yes, since you are not checking usernames/passwords you need to add Auth-Type := Accept on the check line. Ivan Kalik Kalik Informatika ISP Dana 31/3/2008, "Paul Khavkine" <paul.khavkine@distributel.ca> piše:
Hi.
I'm setting up a LAC for L2TP tunneling users to a remote LNS. On the LAC side I want it to obtain the tunneling parameters only based on the realm.
What would be the simplest way to setup FreeRADIUS to only match the realm and return tunneling attributes.
If the realm is not configured, then reject the authentication ? Is it possible to match the Realm in the users file like:
DEFAULT Realm == "dsl.myisp.com" Service-Type = Framed-User, Tunnel-Type = L2TP, Tunnel-Server-Endpoint = "X.X.X.X", Tunnel-Medium-Type = IP
Doesn't seem to work, do I need to include Auth-Type or anything else ?
Thanx Paul
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Paul Khavkine wrote:
What would be the simplest way to setup FreeRADIUS to only match the realm and return tunneling attributes.
A regex would be good.
If the realm is not configured, then reject the authentication ? Is it possible to match the Realm in the users file like:
DEFAULT Realm == "dsl.myisp.com"
Yes, but the "realms" module has to be used (prefix/suffix), and the realm has to be defined.
Doesn't seem to work, do I need to include Auth-Type or anything else ?
As always, "radiusd -X". Alan DeKok.
participants (3)
-
Alan DeKok -
Ivan Kalik -
Paul Khavkine