Where do you split users in groups.

Alan DeKok aland at deployingradius.com
Wed Mar 4 23:19:51 CET 2015


On Mar 4, 2015, at 3:34 PM, jan hugo prins <jhp at jhprins.org> wrote:
> I read in the huntgroup file that you can create a huntgroup that is
> based on both the NAS-IP and the Unix group. I don't know if you can
> also match a LDAP group in the huntgroups file, but if this is possible
> I could create something like this:

  Yes, that should be possible.

> werknemers        NAS-IP-Address = 172.30.27.1
>                            ldap_bedrijf1-Ldap-Group == "werkneme-bedrijf1"
> 
> And then in the users file do something like:
> 
> DEFAULT Realm == "bedrijf1.com", Huntgroup-Name == "werknemers"
>        Aruba-User-Vlan = 101,
>        Aruba-User-Role = "authenticated"
> 
> If both is valid, what is the preferred way of doing this?

  The simpler the better.

  Alan DeKok.



More information about the Freeradius-Users mailing list