Is there any way to perform a logical OR with the check attributes (specifically with the NAS-IP-Address)? What I'd like to do is to authenticate the user if it's coming from one of a list of NAS-IP-Address values, and reject otherwise. Is this possible? GG
Hi,
Is there any way to perform a logical OR with the check attributes (specifically with the NAS-IP-Address)?
What I'd like to do is to authenticate the user if it's coming from one of a list of NAS-IP-Address values, and reject otherwise.
Is this possible?
yes, many ways. hunt-groups, groups and/or unlang all depends on what version of FreeRADIUS you are using and how you want to do things. (you could always use a 3rd party system to decide - eg PERL or python script) alan
I managed to solve the problem thanks to bonok on the #freeradius on FreeNode IRC... I ended up using the =~ operator, and using a regex "1.2.3.4|1.2.3.5" GG On Mon, Nov 15, 2010 at 12:29 PM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Is there any way to perform a logical OR with the check attributes (specifically with the NAS-IP-Address)?
What I'd like to do is to authenticate the user if it's coming from one of a list of NAS-IP-Address values, and reject otherwise.
Is this possible?
yes, many ways. hunt-groups, groups and/or unlang
all depends on what version of FreeRADIUS you are using and how you want to do things. (you could always use a 3rd party system to decide - eg PERL or python script)
alan
Gary T. Giesen wrote:
Is there any way to perform a logical OR with the check attributes (specifically with the NAS-IP-Address)?
$ man unlang
What I'd like to do is to authenticate the user if it's coming from one of a list of NAS-IP-Address values, and reject otherwise.
Is this possible?
Yes. Don't use the "users" file. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Gary T. Giesen