Hi , I have freeradius configured with Mysql. I would like to have a user can ssh login to 2 server linux (i.e. 2 NAS , same username). Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table.. I use the "==" operator end my radcheck table is: mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+ It doesn't work...... Some ideas ??? Thank you Enrico
I forget to tell you ....the 2 server linux are 2 NAS, and I configured sshd pam to use radius. enrico fanti wrote:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user can ssh login to 2 server linux (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
He can't be connecting from both devices in the same time. That's why check is failing. Use huntgroups: pippo User-Name == "pippo" and then list under all the device IPs he can connect to. Ivan Kalik Kalik Informatika ISP Dana 15/2/2008, "enrico fanti" <efanti.list@gmail.com> piše:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user can ssh login to 2 server linux (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
participants (3)
-
enrico fanti -
Enrico Fanti -
Ivan Kalik