Hello. I have FR installed on my server, and also have two LANs (or may be more) managed by this server. Let's say LAN A:192.168.1.0, and LAN B: 192.168.2.0. I'm using FR in combination with postgres database. In my radcheck table I have inserted the following row: userbane='myuser', attribute='Password', op=':=', value='mypass'. Now I want to let the clients that will request services from my FR to be able to authenticate themselves with this username and password only if they are part of LAN B. Can anyone suggest me how to get this done? I tried to put in in the radcheck one row more: userbane='myuser', attribute='NAS-IP-Address', op=':=', value='mypass', but without success. Any help would be appreciated. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Setting-a-user-for-a-specific-LAN-tp... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Tue, Jun 19, 2012 at 12:04 PM, artaxerxe <mapandrei@gmail.com> wrote:
Now I want to let the clients that will request services from my FR to be able to authenticate themselves with this username and password only if they are part of LAN B. Can anyone suggest me how to get this done?
Let's start with a simple question: does the NAS sends an attribute that indicates that a user is part of a particular LAN? Hint: start FR in debug mode, and look at what attributes it receives. If the NAS does not send that attribute, then no, you can't do that. -- Fajar
participants (2)
-
artaxerxe -
Fajar A. Nugraha