unlang question

Bruce_M_Richardson at biscuits.com Bruce_M_Richardson at biscuits.com
Fri Mar 20 13:04:18 CET 2009


Hi,

I have freeRADIUS 2.0.5 authenticating against LDAP via eap and this has 
been working perfectly since last year. 
Now a I have a new requirement to authenticate another set of users in the 
same LDAP tree onto a different service. 
These users will be visitors to our site and will have the user names 
Visitor1 ... Visitor(nn)

I do not want visitors to be able to get onto the original service, and I 
do not want normal users to get onto the visitor service.

My thoughts are to set up a new virtual server and add an 'if' statement 
to look for the visitor user names, and reject or allow as necessary. 

something like this in the new virtual server

if ( Stripped-User-Name != /visitor[0-9]?[0-9]/i ) { reject }

and the inverse for the old service. 

if ( Stripped-User-Name =~ /visitor[0-9]?[0-9]/i ) { reject }

Is this syntax correct ? and where do I put it?

Thanks for your time ...regards,

Bruce Richardson



 Please consider the environment - do you really need to print this email?



________________________________________________________________________________________

This e-mail and any attachments are confidential and solely for the use of the intended recipient.  They may contain material protected by legal professional or other privilege. If you receive it in error, please delete it from your system, make no copies of it, do not disclose its contents to any third party or use it for your own or any other person's benefit. Please advise the sender of its receipt as soon as possible. Although this email and its attachments are believed to be free of any virus or other defect, it is the responsibility of the recipient to ensure that they are virus free and no responsibility is accepted by the company for any loss or damage arising from receipt or use thereof. Any opinions expressed that do not relate to the official business of the company are those of the author, not the United Biscuits group of companies.

United Biscuits (UK) Limited Registered in England number 2506007 Registered Office: Hayes Park, Hayes End Road, Hayes, Middlesex, UB4 8EE
________________________________________________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090320/af9f2535/attachment.html>


More information about the Freeradius-Users mailing list