username with sereral passwords. Which op value?

[tnt at kalik.net]

>  We just don't have enough information to make a decision. If the query
> returns id,Username,Attribute, op, value sorted by id, perhaps we
> could.  If the attributes were
> san0001 Cleartext-Password := santi1
> san0001 NAS-IP-Address == 123.123.123.123
> san0001 Cleartext-Password := santi2
> san0001 NAS-IP-Address == 234.234.234.234
> It might make sense to have different passwords on different NAS boxes.

You can make adjusments for such a case. Extend radcheck schema with field
for NAS-IP-Address and change radcheck query to include it's value.

This does make sense. But a list of possible passwords for a single user ...

Ivan Kalik
Kalik Informatika ISP