Hi. I need to give user specific limitation based on where they connect to. I.e. I have two nas where the user can roam to, but when he logs into hs A he gets Max-Daily-Session := 60, while on B has no daily limit. Based on research, this should be done with Huntgroup. Current wiki page [1] doesn't eplain very much... I appended maxxer NAS-IP-Address == 87.24.AA.BB to /etc/freeradius/huntgroups In radiusd.conf, preprocess section, I have huntgroups = ${confdir}/huntgroups Running freeradius -x I see it reads huntgroups file, but if I try logging in to the NAS at ip 87.24.AA.BB the user doesn't get any special property. (Sadly) I'm (still) using FreeRadius 1.1.x. What did I do wrong? thanks [1] http://wiki.freeradius.org/config/Huntgroups -- Lorenzo Milesi - lorenzo.milesi@yetopen.it GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it
Lorenzo Milesi wrote:
I need to give user specific limitation based on where they connect to. I.e. I have two nas where the user can roam to, but when he logs into hs A he gets Max-Daily-Session := 60, while on B has no daily limit.
Based on research, this should be done with Huntgroup. Current wiki page [1] doesn't eplain very much... I appended maxxer NAS-IP-Address == 87.24.AA.BB to /etc/freeradius/huntgroups
In radiusd.conf, preprocess section, I have huntgroups = ${confdir}/huntgroups
Running freeradius -x I see it reads huntgroups file, but if I try logging in to the NAS at ip 87.24.AA.BB the user doesn't get any special property.
You defined the huntgroup. You didn't *use* it to limit sessions. In the "users" file: DEFAULT Huntgroup-Name == maxxer, Max-Daily-Session := 60 Alan DeKok.
You defined the huntgroup. You didn't *use* it to limit sessions.
In the "users" file:
DEFAULT Huntgroup-Name == maxxer, Max-Daily-Session := 60
Can I use SQL to define HG properties? I.e. setting Max-Daily-Session in radgroupcheck? Or should it be radcheck? thanks! -- Lorenzo Milesi - lorenzo.milesi@yetopen.it GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it
Lorenzo Milesi wrote:
You defined the huntgroup. You didn't *use* it to limit sessions.
In the "users" file:
DEFAULT Huntgroup-Name == maxxer, Max-Daily-Session := 60
Can I use SQL to define HG properties?
No. Huntgroups are defined in the huntgroup file. You use the SQL-Group attribute to check groups in SQL.
I.e. setting Max-Daily-Session in radgroupcheck? Or should it be radcheck?
See the group configurations && schema in SQL. Alan DeKok.
participants (2)
-
Alan DeKok -
Lorenzo Milesi