Different ldap authentications

[Kostas Kalevras]

On Fri, 8 Sep 2006, Angel L. Mateo wrote:

> Hello,
>
> 	We are using freeradius as our radius server and we use it for
> authentication and authorization in different applications. Our users
> backend is a ldap directory, so in radiusd.conf we've got:
>
> 	server = "ldap.domain.com"
>        identity = "cn=radiususer,dc=domain,dc=com"
>        password = radiuspw
>        basedn = "ou=People,dc=domain,dc=com"
>        filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
>
> 	Now, we need to configure our radius server so it could use another
> different ldap configuration for some of its clients. I know I could
> discriminate clients, but I haven't found how to make it use another
> different ldap configuration, if it is possible.

Set Autz-Type depending on the incoming client (check NAS-IP-Address or create 
Huntgroups) and create multiple ldap module instances. See doc/Autz-Type

>
> -- 
> Angel L. Mateo Mart?nez
> Secci?n de Telem?tica
> ?rea de Tecnolog?as de la Informaci?n       _o)
> y las Comunicaciones Aplicadas (ATICA)      / \\
> http://www.um.es/atica                    _(___V
> Tfo: 968367590
> Fax: 968398337
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>

--
Kostas Kalevras		Network Operations Center
kkalev at noc.ntua.gr	National Technical University of Athens, Greece
Work Phone:		+30 210 7721861
'Go back to the shadow'	Gandalf