Tie up user to specific NAS
Hi, How do I tie up user to specific NAS so that they can log in from that location only? I have different hotspots in different locations and using dynamic-clients? After a quick search, I found "NAS-Identifier" attribute. Is this the solution? If yes NAS-Identifier = ? (IP, MAC, Name) Thanks Deepak -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================
How do I tie up user to specific NAS so that they can log in from that location only? I have different hotspots in different locations and using dynamic-clients? After a quick search, I found "NAS-Identifier" attribute. Is this the solution? If yes
NAS-Identifier = ? (IP, MAC, Name)
You will have to read NAS documentation in order to find out. On many devices you can set NAS-Identifier to be whatever you want. On some devices it can have only a certain default value. Ivan Kalik
On Thu, Nov 26, 2009 at 3:11 AM, <tnt@kalik.net> wrote:
You will have to read NAS documentation in order to find out. On many devices you can set NAS-Identifier to be whatever you want. On some devices it can have only a certain default value.
Ivan Kalik
I searched for the previous discussion regarding this topic and found one on net http://lists.cistron.nl/pipermail/freeradius-users/2009-May/msg00466.html My implementation is same as discussed in previous list. Seems like there is no way to implement this at current situation (specially when using dyanmic-clients) My implementation is: ========== NAS: chilli based on dd-wrt FR version: 2.1.6, Mysql backend with dynamic-clients OS: CentOS 5.0 ========= Any suggestion is highly appreciated Thanks Deepak
Deepak <d88pak@gmail.com> wrote:
On Thu, Nov 26, 2009 at 3:11 AM, <tnt@kalik.net> wrote:
You will have to read NAS documentation in order to find out. On many devices you can set NAS-Identifier to be whatever you want. On some devices it can have only a certain default value.
I searched for the previous discussion regarding this topic and found one on net http://lists.cistron.nl/pipermail/freeradius-users/2009-May/msg00466.html
My implementation is same as discussed in previous list. Seems like there is no way to implement this at current situation (specially when using dyanmic-clients)
Any suggestion is highly appreciated
Not used it but I would slap into the users file something like: ---- DEFAULT LDAP-Group == "%{NAS-Identifier}" DEFAULT Auth-Type := Reject ---- As you are using SQL you will have to put all your group data in SQL but that should do it. Of course if your NAS's do not give you something useful and unique to key themselves off (something customisable), then you are 'boned'. With this approach then you can make users members of multiple groups too obviously so they can log into more than one place. Cheers -- Alexander Clouter .sigmonster says: When the candles are out all women are fair. -- Plutarch
participants (3)
-
Alexander Clouter -
Deepak -
tnt＠kalik.net