authentication according to nas ip adress
Hello How can I do this with freeradius: If auth request come from NAS1 use ldap1 if auth request come from NAS2 use ldap2
Am Dienstag, 6. Februar 2007 11:17:41 schrieb Marc Boisis-Delavaud:
Hello
How can I do this with freeradius:
If auth request come from NAS1 use ldap1 if auth request come from NAS2 use ldap2
in the users file, do DEFAULT Client-IP-Address == NAS1, Autz-Type := ldap1 DEFAULT Client-IP-Address == NAS2, Autz-Type := ldap2 Possibly also Auth-Type:=..., depending on which parts of the ldap stuff you want to split up. Then create two ldap instances, ldap1 and ldap2 that do the stuff you want them to. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Hi! My first question is if the dialup_admin is still supported and compatible with latest free radius:)? because right now I am trying to use it with my latest free radius cvs version. If it is still compatible please help me with the following issues: Is it possible to control the radcheck table through dialup_admin or it only used for accounting?? Another thing is that when I try to use log_badlogins I get the following error: ./log_badlogins /var/log/radiusd/radiusd.log /home/radius/dialup_admin/conf/admin.conf Could not open %{general_raddb_dir}/clients.conf file Thank you for any help Bests Tomasz
tzieleniewski wrote:
Hi!
My first question is if the dialup_admin is still supported and compatible with latest free radius:)? because right now I am trying to use it with my latest free radius cvs version.
Yes
If it is still compatible please help me with the following issues: Is it possible to control the radcheck table through dialup_admin or it only used for accounting??
Yes
Another thing is that when I try to use log_badlogins I get the following error: ./log_badlogins /var/log/radiusd/radiusd.log /home/radius/dialup_admin/conf/admin.conf Could not open %{general_raddb_dir}/clients.conf file
Log_badlogins does not support variable expansion. So set the path to clients.conf to a literal value in admin.conf
Thank you for any help Bests Tomasz
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
tzieleniewski wrote:
Hi!
My first question is if the dialup_admin is still supported and compatible with latest free radius:)? because right now I am trying to use it with my latest free radius cvs version.
Yes
If it is still compatible please help me with the following issues: Is it possible to control the radcheck table through dialup_admin or it only used for accounting??
Yes How is it done? I cannot find any documentation about it. Ive installed dialup_admin and it works. So wich positions from the main menu for the dialup_admin panel consider accounting radcheck table contents??
Another thing is that when I try to use log_badlogins I get the following error: ./log_badlogins /var/log/radiusd/radiusd.log /home/radius/dialup_admin/conf/admin.conf Could not open %{general_raddb_dir}/clients.conf file
Log_badlogins does not support variable expansion. So set the path to clients.conf to a literal value in admin.conf
I managed to start it but whenever I send and accept request to the freeradius nothing appears in the database? The corresponding records should appear in the badusers table, right? I read in the HOWTO that log_badlogins will concatenate client short name with the general_domain variable in admin.conf. this client short name is the name defined in the freeradius clients.conf file?? Then it creates $client_shortname.$domain and resolves NAS IP address by some query?? Is it the DNS A record query or something else??
Thank you for any help Bests Tomasz
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
tzieleniewski wrote:
tzieleniewski wrote:
Hi!
My first question is if the dialup_admin is still supported and compatible with latest free radius:)? because right now I am trying to use it with my latest free radius cvs version.
Yes
If it is still compatible please help me with the following issues: Is it possible to control the radcheck table through dialup_admin or it only used for accounting??
Yes
How is it done? I cannot find any documentation about it. Ive installed dialup_admin and it works. So wich positions from the main menu for the dialup_admin panel consider accounting radcheck table contents??
Everything that has to do with group management,new user,edit user and so on.
Another thing is that when I try to use log_badlogins I get the following error: ./log_badlogins /var/log/radiusd/radiusd.log /home/radius/dialup_admin/conf/admin.conf Could not open %{general_raddb_dir}/clients.conf file
Log_badlogins does not support variable expansion. So set the path to clients.conf to a literal value in admin.conf
I managed to start it but whenever I send and accept request to the freeradius nothing appears in the database? The corresponding records should appear in the badusers table, right?
No, in the radacct table. badusers is for another thing
I read in the HOWTO that log_badlogins will concatenate client short name with the general_domain variable in admin.conf. this client short name is the name defined in the freeradius clients.conf file?? Then it creates $client_shortname.$domain and resolves NAS IP address by some query?? Is it the DNS A record query or something else??
Yes it's the DNS A record query
Thank you for any help Bests Tomasz
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Kostas Kalevras -
Marc Boisis-Delavaud -
Stefan Winter -
tzieleniewski