Huntgroups and Network of Clients

[HRZ Konten]

> In 2.1.3 you can use unlang and not need huntgroups at all. Read man
> unlang on freeradius site.
>   
Thank you for answer Ivan. I'm thinking about upgrading of 2.1.3 or
2.1.4 but I'm not really sure how to transform my huntgroups und users
configuration in unlang. I read the documentation but I have big
problems to understand it. Please I need a little bit help on this
Should it be something like that?


if (Ldap-Group == employee && NAS-IP-Address >x.x.x.x && NAS-IP-Address<
y.y.y.y) {
Auth-Type:= Pam} else
if (Ldap-Group == student && NAS-IP-Address >z.z.z.z && NAS-IP-Address<
y.y.y.y) {
Auth-Type:= Pam} else
....
if (NAS-IP-Address >z.z.z.z && NAS-IP-Address< y.y.y.y) {
Auth-Type:= Pam} else
{

       Auth-Type := Reject
}



Sorry but I'm not sure
1. whether the NAS-IP-Address ist the right variable to check  if a
client is in an Subnetwork
2. where should I put this if-condition: kann I put it in users instead
of Huntgroups? Or should stay in sites-available/default and what
section or in radiusd.conf?
3. I have about more than 100 different Clients, some with IP-Address
some with NetworkMask. It is really simple to put that ones with
IP-Addresses into the huntgroups file with different groups . But when I
implement a condition with unlang for every one of them, wouldn't that
be a killer for the performance when every query checks the script?

Is that possible that I keep my huntgroups for all clients with
IP-Addresses and write a conditions only for network masks? What will be
the configuration then?

DEFAULT Huntgroup-Name==testldap, Ldap-Group == employee, Auth-Type := Pam
        Fall-Through = no

DEFAULT if (NAS-IP-Address >z.z.z.z && NAS-IP-Address< y.y.y.y) {
Auth-Type:= Pam} else
{

       Auth-Type := Reject
       Reply-Message = "Please call the helpdesk."
}

Does that make sense?

Greets,
Meyes


> Ivan Kalik
> Kalik Informatika ISP
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>