FreeRADIUS Authorization Question

Alan DeKok aland at deployingradius.com
Tue Nov 11 15:01:04 CET 2014


Russell Mike wrote:
> How do we authorize users using FreeRADIUS such as way that ClientA can
> only use VOIP service, ClientB mail only, ClientC internet only and so on ?

  How do you tell those users apart?  See the debug output.

> Do we do by using some attributes ? or possible in unlang only ?

  Everything in RADIUS is attributes.

> i do not have logical diagram in my mind, how would i achieve that,
> using port numbers of services ?

  I have no idea.  Look at the debug output to see what's different
between the packets.  Then, write rules to look for those differences,
and enforce different policies.

  Alan DeKok.


More information about the Freeradius-Users mailing list