Clients.conf file seems not working
Hi, folks. My scenario has a Cisco NAS authenticating in a Debian lenny running FreeRADIUS (which is using the /etc/passwd method). I must to give access to some users just in a specific NASes. I noticed that, even if I haven't the entry in clients.conf file for my NAS, like that... client 10.0.0.2/32 { secret = test shortname = edge } ...I am able to access my device. So I understand that this clients.conf isn't useful in that scenario. Am I right? Att, -- Wagner Pereira PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br Tel. (11) 3091-8901 fone@RNP: 10158902
Wagner Pereira wrote:
I noticed that, even if I haven't the entry in clients.conf file for my NAS, like that...
client 10.0.0.2/32 { secret = test shortname = edge }
...I am able to access my device.
Read the debug log to see why.
So I understand that this clients.conf isn't useful in that scenario.
Am I right?
No. Either (a), you have another entry configured in the clients.conf file, or (b), the NAS is never using RADIUS. Alan DeKok.
participants (2)
-
Alan DeKok -
Wagner Pereira