On Fri, 8 Sep 2006, Angel L. Mateo wrote:

Hello,

We are using freeradius as our radius server and we use it for authentication and authorization in different applications. Our users backend is a ldap directory, so in radiusd.conf we've got:

server = "ldap.domain.com" identity = "cn=radiususer,dc=domain,dc=com" password = radiuspw basedn = "ou=People,dc=domain,dc=com" filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"

Now, we need to configure our radius server so it could use another different ldap configuration for some of its clients. I know I could discriminate clients, but I haven't found how to make it use another different ldap configuration, if it is possible.

Set Autz-Type depending on the incoming client (check NAS-IP-Address or create Huntgroups) and create multiple ldap module instances. See doc/Autz-Type

-- Angel L. Mateo Mart?nez Secci?n de Telem?tica ?rea de Tecnolog?as de la Informaci?n _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 968367590 Fax: 968398337

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- Kostas Kalevras Network Operations Center kkalev@noc.ntua.gr National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf