how to limit users access by groups using radgroucheck
Hi all, I'm new to freeradius and I would like to know if someone can tell me how to limit users access by groups using radgroupcheck. I have made some researchs and I saw that radgroupcheck didn't reject users even if there is a mismatch attribute. I'd like to have a confirmation about this thing if it's true or not. I know with radcheck we can specify attribute like NAS-Identifier or NAS-IP-Address ... to limit user's access but i'm searching for a solution using groups. Can someone help me please? Thx -- RAZAFIMBELO Faliharinohatra
RAZAFIMBELO Faliharinohatra Rindra wrote:
I'm new to freeradius and I would like to know if someone can tell me how to limit users access by groups using radgroupcheck.
Read doc/rlm_sql.
I have made some researchs and I saw that radgroupcheck didn't reject users even if there is a mismatch attribute.
No. The group checking is about *matching*. It's up to you to determine what to do when it matches.
I'd like to have a confirmation about this thing if it's true or not. I know with radcheck we can specify attribute like NAS-Identifier or NAS-IP-Address ... to limit user's access but i'm searching for a solution using groups. Can someone help me please?
What part of the documentation is unclear? Be specific.
Hi, I finally found what was the problem. I have read the rlm_sql but it doesn't show how to limit access by groups. In fact, what i was trying to do is to run two instances of coova chilli on a machine, create two groups of users on freeradius database, one for the first chilli and one another for the second and finally limit access for each group to only his dedicated chilli. Thx On 20/06/2012 00:24, Alan DeKok wrote:
RAZAFIMBELO Faliharinohatra Rindra wrote:
I'm new to freeradius and I would like to know if someone can tell me how to limit users access by groups using radgroupcheck.
Read doc/rlm_sql.
I have made some researchs and I saw that radgroupcheck didn't reject users even if there is a mismatch attribute.
No. The group checking is about *matching*. It's up to you to determine what to do when it matches.
I'd like to have a confirmation about this thing if it's true or not. I know with radcheck we can specify attribute like NAS-Identifier or NAS-IP-Address ... to limit user's access but i'm searching for a solution using groups. Can someone help me please?
What part of the documentation is unclear? Be specific. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- RAZAFIMBELO Faliharinohatra Administrateur réseau et système Blueline Business Service tel: (+261) 34 56 000 85 mail: rindra@bbs.mg
participants (2)
-
Alan DeKok -
RAZAFIMBELO Faliharinohatra Rindra