DEFAULT policy order in Users file

Alan DeKok aland at deployingradius.com
Thu Oct 14 15:39:47 CEST 2010


Jevos, Peter wrote:
> DEFAULT      Auth-Type := ntlm_auth_vpn_comp 
>                                 NAS-IP-Address == 10.1.1.1,
>                                 Service-Type = Framed-User,
>                                 Framed-Protocol = PPP,
...
> So it means, when access request comes from the address 10.1.1.1 use
> authentication type ntlm_auth_vpn_comp.

  No, it doesn't mean that.  See the documentation "man users", and the
comments in raddb/users.

> However it doesn’t work, cause every request match only the first
> DEFAULT statement, despite of that it comes from different
> NAS-IP-Address then 10.1.1.1
>  
> Do you know why it is happen ?

  You didn't configure the "users" file correctly.

  This is documented.

  Alan DeKok.



More information about the Freeradius-Users mailing list