Limiting a user to a specific realm

Ivan Kalik tnt at kalik.net
Tue Aug 19 00:35:36 CEST 2008


>What I'ld like to do is to fix it so that only certain usernames could log
>on as username at realm3.com (leave realm1.com and realm2.com as they are). So
>anyone with a correct username/password could log in using realm1.com or
>realm2.com but only bob, jane and alex could log in with  realm3.com.
>
>I suppose I could add an entry in my users file as so:
>
>bob Realm=realm3.com, Auth-Type = Local, Password == xxxxx
>        Service-Type = Framed-User,
>        Framed-Protocol = PPP,
>        Framed-IP-Address = 255.255.255.254,
>        Framed-IP-Netmask = 255.255.255.255,
>        Framed-Routing = None,
>        Framed-Compression = None,
>        Framed-MTU = 1500
>

This will also limit bob to realm3, so he would not be able to log in as
realm1 or 2. Create a huntgroup for realm3 (leave users entry for it as
it is) and list usernames that can log into it there. Unlisted users
will not be able to log in.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list