FreeRadius - Multiple Clients

[Arran Cudbard-Bell]

On 9 Apr 2014, at 06:30, Casey Daniels <mailinglist at cd.kcfam.net> wrote:

> Hello,
>  Starting to get into using FreeRADIUS and had a question, that I can't seem to find the answer to, I'm guessing its because I'm not even totally clear of the correct terminology.
> 
> I'm using FreeRADIUS 3.0.? not sure of the exact version as I complied it a month or two ago and I don't have access to the computer right this second.
> 
> Okay, my question is how do I set things up so the FreeRADIUS will evaluate a request based on where its coming from.
> 
> So given the following Set up.
> 
> Have two services wanting to use FreeRADIUS for authentication
> 
> 1. Wifi
> 2. a HTTP Proxy
> 
> I also have a bunch of users.  All users can use Wifi (unless of course I need to revoke them for a little bit)
> 
> Then certain Users need to be authenticated against the HTTP Proxy to allow them to do direct connections instead
> 
> I plan on using the standard users file if possible.

client <wifi> {
	nas_type = 'wifi'
}


authorize {
	if ("%{client:nas_type}" == 'wifi') {
		<do wifi things!>
	}
}

Unfortunately regular expressions are not permitted as the LHS of a check item pair in a users file
so you have to use unlang, or assign the result of %{client:nas_type} to a temporary attribute
and use that instead.

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/mailman/private/freeradius-users/attachments/20140409/91f7319e/attachment.pgp>