I've configured my tables as follows : mysql> select * from usergroup; +----+----------+-------------+ | id | UserName | GroupName | +----+----------+-------------+ | 13 | st234824 | test_radius | +----+----------+-------------+ mysql> select * from radcheck; +----+----------+----------------+----+------------------------------------+ | id | UserName | Attribute | op | Value | +----+----------+----------------+----+------------------------------------+ | 1 | st234824 | Crypt-Password | := | LqI8nHgSp/pTY | +----+----------+----------------+----+------------------------------------+ mysql> select * from radgroupcheck; +----+-------------+-----------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-------------+-----------+----+-------+ | 4 | test_radius | Auth-Type | := | TLS | +----+-------------+-----------+----+-------+ mysql> select * from nas; +----+---------------+-----------+-------+-------+------------+-----------+-------------+ | id | nasname | shortname | type | ports | secret | community | description | +----+---------------+-----------+-------+-------+------------+-----------+-------------+ | 6 | 192.168.9.155 | switch | cisco | 1812 | bonjour | | | | 9 | 192.168.9.154 | webmail01 | other | 1812 | testing123 | | | Which type of attributes should I use to access from "webmail01", but not "switch" for example ? thanks ________________________________ De: freeradius-users-bounces+nasr-eddine.badaoui=ratp.fr@lists.freeradius.org de la part de freeradius-users-request@lists.freeradius.org Date: lun. 13/10/2008 19:30 À: freeradius-users@lists.freeradius.org Objet : Freeradius-Users Digest, Vol 42, Issue 80 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. access rights for some users ou users groups with freeradius and mysql (BADAOUI Nasr-Eddine (P)) 2. Re: access rights for some users ou users groups with freeradius and mysql (tnt@kalik.net) 3. Re: One user - Different Service Type depending on NAS (Alan DeKok) 4. Re: NAS-Identifier (Paul Bartell) 5. FR2.1.1 Solaris 5.10 x86 32-bit race condition (Chris Howley) 6. Re: FR2.1.1 Solaris 5.10 x86 32-bit race condition (Alan DeKok) 7. Authentication ok but not login on a Netopia (Gamaliel Bedolla) 8. syntax errors on mysql ip pools (Marcelus Trojahn) ---------------------------------------------------------------------- Message: 1 Date: Mon, 13 Oct 2008 13:51:28 +0200 From: "BADAOUI Nasr-Eddine (P)" <nasr-eddine.badaoui@ratp.fr> Subject: access rights for some users ou users groups with freeradius and mysql To: <freeradius-users@lists.freeradius.org> Message-ID: <E50F5250B1B60045B2B10390D6FFE79462BC7E@EXCHANGEA2.info.ratp> Content-Type: text/plain; charset="iso-8859-1" Hi, I'd like to know how to authorize some users or users's group created in mysql tables can logged only on some mysql's clients, with freeradius. Mysql's tables are : nas table for clients radcheck table for users radgropucheck table usergroup table many thanks