Profile-Name attribute

Matthew Newton mcn4 at leicester.ac.uk
Wed Apr 17 23:53:51 CEST 2013


On Wed, Apr 17, 2013 at 05:04:11PM -0400, John Center wrote:
> it correctly, it looks like one could have a "profiles" file with
> individual named profiles defined containing NAS-specific text that
> would be sent back to the NAS as is upon successful authentication.
> Is anything like this still supported?  Can the "User-Profile"

There are many ways of sending attributes back based on incoming
attributes (such as which NAS the request came from). One way
would be to just use an instantiation of the files module that
keys off the NAS-IP-Address:

files nasprofile {
  key = "%{NAS-IP-Address}"
  usersfile = ${confdir}/nas-profile
  ...
}

in the "nas-profile" file:

10.0.0.1
    Reply-Message := "Welcome to NAS 1"

10.0.0.2
    Reply-Message := "Welcome to NAS 2"

then call "nasprofile" in your sites-enabled/default authorize
section.

...or use one of the other multitude of methods just discussed in
the Idle-Timeout thread :-)

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Users mailing list