ldap group filter by different incoming IPs

Alan DeKok aland at deployingradius.com
Mon Jan 25 08:32:21 CET 2010


Stephon Chen wrote:
>    We want to do a sceranio like below:
>    (Pre-requisties: a radius server RD, a ldap backend LD, and 2 unix
> clients CA and CB with different IPs)
>    CA sends user auth requests to RD, RD would only send if the user is
> in ldap group A
>    CB sends user auth requests to RD, RD would only send if the user is
> in ldap group B
> 
>   Is it possible for only one radius server to do this according to
> different incoming IPs?

  Yes.  You can set up a virtual server for client A, and another for
client B.

  See raddb/sites-available/README

  Alan DeKok.



More information about the Freeradius-Users mailing list