Hi, I'm a newbie on freeradius, I need to send the same attribute to multiple users how can I do, I'm using freeradius.net 1.1.7 my users files work this way user1 User-Password == "pwusr1" user2 User-Password == "pwusr2" ... usern User-Password == "pwusrn" the attribute I need to send is Filter-Id="some_acl0.in" to any user that radius send access-accept I want to know the config sintax in order to avoid this: user1 User-Password == "pwusr1" Filter-Id="some_acl0.in" user2 User-Password == "pwusr2" Filter-Id="some_acl0.in" ... usern User-Password == "pwusrn" Filter-Id="some_acl0.in" May I use the DEFAULT? Thanks in advance, Sergio
1. Read instructions in users file. 2. Don't use User-Password. To find out what should you use - see 1. 3. Yes, that's what DEFAULT entries are for. To find out how - see 1. Ivan Kalik Kalik Informatika ISP Dana 27/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> piše:
Hi, I'm a newbie on freeradius, I need to send the same attribute to multiple users how can I do, I'm using freeradius.net 1.1.7 my users files work this way
user1 User-Password == "pwusr1" user2 User-Password == "pwusr2" .... usern User-Password == "pwusrn"
the attribute I need to send is Filter-Id="some_acl0.in" to any user that radius send access-accept
I want to know the config sintax in order to avoid this:
user1 User-Password == "pwusr1" Filter-Id="some_acl0.in" user2 User-Password == "pwusr2" Filter-Id="some_acl0.in" .... usern User-Password == "pwusrn" Filter-Id="some_acl0.in"
May I use the DEFAULT?
Thanks in advance,
Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dear Ivan, Thank you for your prompt reply. May be I´m not so clever as you think I´m, I've already read the users file but I couldn't understand where to put the "DEFAULT" and what to check. I've tried to put DEFAULT in first place without any check (what should I check?), after this line I put in the new line the TAB and the filter attribute I need, and below this the Fall-Through = 1, This way didn't work. May be you are kind and can give me an additional help. Thanks in advance Best regards, Sergio PS: I will use Cleartext-Password instead of User-Password. On 9/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
1. Read instructions in users file.
2. Don't use User-Password. To find out what should you use - see 1.
3. Yes, that's what DEFAULT entries are for. To find out how - see 1.
Ivan Kalik Kalik Informatika ISP
Dana 27/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> piše:
Hi, I'm a newbie on freeradius, I need to send the same attribute to multiple users how can I do, I'm using freeradius.net 1.1.7 my users files work this way
user1 User-Password == "pwusr1" user2 User-Password == "pwusr2" .... usern User-Password == "pwusrn"
the attribute I need to send is Filter-Id="some_acl0.in" to any user that radius send access-accept
I want to know the config sintax in order to avoid this:
user1 User-Password == "pwusr1" Filter-Id="some_acl0.in" user2 User-Password == "pwusr2" Filter-Id="some_acl0.in" .... usern User-Password == "pwusrn" Filter-Id="some_acl0.in"
May I use the DEFAULT?
Thanks in advance,
Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"This way didn't work." I hope that means that DEFAULT entry didn't match, not that attribute didn't do anything on the NAS. DEFAULT entry should go below the user entries. Try using operator that always matches then: DEFAULT User-Name =* "whatever" Filter-Id="some_acl0.in" Fall-Through = 1 Thet should appear as a math in the debug. Ivan Kalik Kalik Informatika ISP Dana 28/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> piše:
Dear Ivan,
Thank you for your prompt reply. May be I´m not so clever as you think I´m, I've already read the users file but I couldn't understand where to put the "DEFAULT" and what to check. I've tried to put DEFAULT in first place without any check (what should I check?), after this line I put in the new line the TAB and the filter attribute I need, and below this the Fall-Through = 1, This way didn't work. May be you are kind and can give me an additional help. Thanks in advance
Best regards,
Sergio
PS: I will use Cleartext-Password instead of User-Password.
On 9/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
1. Read instructions in users file.
2. Don't use User-Password. To find out what should you use - see 1.
3. Yes, that's what DEFAULT entries are for. To find out how - see 1.
Ivan Kalik Kalik Informatika ISP
Dana 27/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> pie:
Hi, I'm a newbie on freeradius, I need to send the same attribute to multiple users how can I do, I'm using freeradius.net 1.1.7 my users files work this way
user1 User-Password == "pwusr1" user2 User-Password == "pwusr2" .... usern User-Password == "pwusrn"
the attribute I need to send is Filter-Id="some_acl0.in" to any user that radius send access-accept
I want to know the config sintax in order to avoid this:
user1 User-Password == "pwusr1" Filter-Id="some_acl0.in" user2 User-Password == "pwusr2" Filter-Id="some_acl0.in" .... usern User-Password == "pwusrn" Filter-Id="some_acl0.in"
May I use the DEFAULT?
Thanks in advance,
Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thank you Ivan YOU DID IT! but for the mailing list records this block: DEFAULT Filter-Id="some_acl0.in", Fall-Through = 1 should go ABOVE users entry (once a user entry is checked the rest of the file is ignored unless you put a fall through per each user) with a "," ending the first response line, there is no need to check against nothing in first line. Thank you again Ivan, you drop some light to my confused mind Best regards, Sergio On 9/28/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
"This way didn't work." I hope that means that DEFAULT entry didn't match, not that attribute didn't do anything on the NAS. DEFAULT entry should go below the user entries. Try using operator that always matches then:
DEFAULT User-Name =* "whatever" Filter-Id="some_acl0.in" Fall-Through = 1
Thet should appear as a math in the debug.
Ivan Kalik Kalik Informatika ISP
Dana 28/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> piše:
Dear Ivan,
Thank you for your prompt reply. May be I´m not so clever as you think I´m, I've already read the users file but I couldn't understand where to put the "DEFAULT" and what to check. I've tried to put DEFAULT in first place without any check (what should I check?), after this line I put in the new line the TAB and the filter attribute I need, and below this the Fall-Through = 1, This way didn't work. May be you are kind and can give me an additional help. Thanks in advance
Best regards,
Sergio
PS: I will use Cleartext-Password instead of User-Password.
On 9/27/07, tnt@kalik.co.yu <tnt@kalik.co.yu> wrote:
1. Read instructions in users file.
2. Don't use User-Password. To find out what should you use - see 1.
3. Yes, that's what DEFAULT entries are for. To find out how - see 1.
Ivan Kalik Kalik Informatika ISP
Dana 27/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> pi e:
Hi, I'm a newbie on freeradius, I need to send the same attribute to multiple users how can I do, I'm using freeradius.net 1.1.7 my users files work this way
user1 User-Password == "pwusr1" user2 User-Password == "pwusr2" .... usern User-Password == "pwusrn"
the attribute I need to send is Filter-Id="some_acl0.in" to any user that radius send access-accept
I want to know the config sintax in order to avoid this:
user1 User-Password == "pwusr1" Filter-Id="some_acl0.in" user2 User-Password == "pwusr2" Filter-Id="some_acl0.in" .... usern User-Password == "pwusrn" Filter-Id="some_acl0.in"
May I use the DEFAULT?
Thanks in advance,
Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
unsubscribe John Wan Please consider the environment before printing this email
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Friday, 28 September 2007 9:02 AM To: FreeRadius users mailing list Subject: Re: same attribute for multiple users
1. Read instructions in users file.
2. Don't use User-Password. To find out what should you use - see 1.
3. Yes, that's what DEFAULT entries are for. To find out how - see 1.
Ivan Kalik Kalik Informatika ISP
Dana 27/9/2007, "Sergio Del Pino" <sdelp66@gmail.com> piše:
Hi, I'm a newbie on freeradius, I need to send the same attribute to multiple users how can I do, I'm using freeradius.net 1.1.7 my users files work this way
user1 User-Password == "pwusr1" user2 User-Password == "pwusr2" .... usern User-Password == "pwusrn"
the attribute I need to send is Filter-Id="some_acl0.in" to any user that radius send access-accept
I want to know the config sintax in order to avoid this:
user1 User-Password == "pwusr1" Filter-Id="some_acl0.in" user2 User-Password == "pwusr2" Filter-Id="some_acl0.in" .... usern User-Password == "pwusrn" Filter-Id="some_acl0.in"
May I use the DEFAULT?
Thanks in advance,
Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- _______________________________________________________________________________ Notice from Melbourne Business School Ltd The information contained in this e-mail is confidential, and is intended for the named person's use only. It may contain proprietary or legally privileged information. If you have received this email in error, please notify the sender and delete it immediately. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient Internet communications are not secure. You should scan this message and any attachments for viruses. Melbourne Business School does not accept any liability for loss or damage which may result from receipt of this message or any attachments. ______________________________________________________________________________
participants (3)
-
John Wan -
Sergio Del Pino -
tnt@kalik.co.yu