In article <[EMAIL PROTECTED]>,
 <[EMAIL PROTECTED]> wrote:
>[EMAIL PROTECTED] wrote:
>> Is there an easy way to set up per-NAS-IP authentication?  The
>> situation that I have is that I have two classes of users, people
>> like me (PLM) and people NOT like me (PNLM).  It's the PNLMs that
>> are my focus right now.  I want RADIUS to grant access for certain
>> users to certain devices (by IP), and not to others.
>
>  Not really, no.  I'd like to be able to choose a per-NAS 'users'
>file, but the configuration code doesn't really support that right
>now.

Guess you can do this using the huntgroups file, assign two huntgroups
to two groups of devices (they can overlap).

Then in the users file do

user1   Huntgroup-Name = "few-devices", Password = foo
        .. attrs ..

user2   Huntgroup-Name = "most-devices", Password = bar
        .. attrs ..

Mike.
-- 
"dselect has a user interface which scares small children"
        -- Theodore Tso, on debian-devel


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to