I'm using freeradius 2.1.7. I am using freeradius to authenticate users to have access to Internet. I want my user to use their group which is their department to be able to have internet because I need tractability. To understand my problem I’m going to use an example, User-Name: bob Groupe-name: communication I want freeradius to accept bob just if he access with bob@communication, I don’t want freeradius to accept if he use bob@business I had use the realm witch I configured in proxy.conf; but this solution enable bob to access with bob@business I apologize in advance if my question is silly, But really I’m Stuck here and I need your help -- View this message in context: http://freeradius.1045715.n5.nabble.com/Domain-in-Username-tp3259377p3259377... Sent from the FreeRadius - User mailing list archive at Nabble.com.
zouzou wrote:
I am using freeradius to authenticate users to have access to Internet. I want my user to use their group which is their department to be able to have internet because I need tractability. To understand my problem I’m going to use an example, User-Name: bob Groupe-name: communication I want freeradius to accept bob just if he access with bob@communication, I don’t want freeradius to accept if he use bob@business
Define a "communication" realm, and don't define a "business" realm.
I had use the realm witch I configured in proxy.conf; but this solution enable bob to access with bob@business
No, it doesn't. It works that way only if you define a "business" realm.
I apologize in advance if my question is silly, But really I’m Stuck here and I need your help
Asking clear questions is a good start. Alan DeKok.
Define a "communication" realm, and don't define a "business" realm. But I have other users in the business department, for exemple Jhon, and i want freeradius to accept if he uses jhon@business. However, I don’t want freeradius to accept if he uses jhon@communication. The problem is that these departments exist In the proxy.conf file, I had defined all departments as realm. Thank you again.
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Domain-in-Username-tp3259377p3259448... Sent from the FreeRadius - User mailing list archive at Nabble.com.
You could try this method ... Don't 'strip' the realm and store complete usernames in your users file (or database). So your username would be "jhon@business" or "bob@communication". Regards, Jason -----Original Message----- From: freeradius-users-bounces+jhodges=pocket.com@lists.freeradius.org [mailto:freeradius-users-bounces+jhodges=pocket.com@lists.freeradius.org ] On Behalf Of zouzou Sent: Wednesday, November 10, 2010 3:21 PM To: freeradius-users@lists.freeradius.org Subject: Re: Domain in Username
Define a "communication" realm, and don't define a "business" realm. But I have other users in the business department, for exemple Jhon, and i want freeradius to accept if he uses jhon@business. However, I don't want freeradius to accept if he uses jhon@communication. The problem is that these departments exist In the proxy.conf file, I had defined all departments as realm. Thank you again.
-- View this message in context: http://freeradius.1045715.n5.nabble.com/Domain-in-Username-tp3259377p325 9448.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I am using freeradius to authenticate users to have access to Internet. I want my user to use their group which is their department to be able to have internet because I need tractability. To understand my problem I'm going to use an example, User-Name: bob Groupe-name: communication I want freeradius to accept bob just if he access with bob@communication, I don't want freeradius to accept if he use bob@business
I had use the realm witch I configured in proxy.conf; but this solution enable bob to access with bob@business
Use an SQL (MySQL) database to store user info and create groups. http://wiki.freeradius.org/SQL_HOWTO Tim
participants (4)
-
Alan DeKok -
Jason Hodges -
Tim Sylvester -
zouzou