Users from specific nas

Pshem Kowalczyk pshem.k at gmail.com
Thu Aug 7 23:14:28 CEST 2008


Hi,

You can use huntgroups and sql groups that check those huntgroups:

DIALUP          NAS-Identifier == "akl-grafton-diallns3"
DIALUP          NAS-Identifier == "akl-grafton-diallns4"

and then in the db - create groups that match the huntgroups.

radbackend=> select * from radgroupcheck;
 id |  groupname   |   attribute    | op |       value
----+--------------+----------------+----+--------------------
  5 | DIALUP       | Huntgroup-Name | == | DIALUP

and set up user accounts like this so they use groups:

radbackend=> select * from radusergroup where username='przem';
 username | groupname | priority
----------+-----------+----------
 przem    | ADSL      |        1
 przem    | DIALUP    |        2

kind regards
Pshem



2008/8/8 Cris Boisvert <cris at usai.net>:
> Using freeradius with mysql backend.
>
> Currently lets all nas devices authenticate user/pass.
>
> Want to set it up so that specific users can authenticate only from specific
> nas devices.
>
> Like huntgroups but need to have it setup in mysql
>
> Does anyone have a reccomended config for this?
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>



More information about the Freeradius-Users mailing list