In article <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]> wrote:
>[EMAIL PROTECTED] wrote:
>> Is there an easy way to set up per-NAS-IP authentication? The
>> situation that I have is that I have two classes of users, people
>> like me (PLM) and people NOT like me (PNLM). It's the PNLMs that
>> are my focus right now. I want RADIUS to grant access for certain
>> users to certain devices (by IP), and not to others.
>
> Not really, no. I'd like to be able to choose a per-NAS 'users'
>file, but the configuration code doesn't really support that right
>now.
Guess you can do this using the huntgroups file, assign two huntgroups
to two groups of devices (they can overlap).
Then in the users file do
user1 Huntgroup-Name = "few-devices", Password = foo
.. attrs ..
user2 Huntgroup-Name = "most-devices", Password = bar
.. attrs ..
Mike.
--
"dselect has a user interface which scares small children"
-- Theodore Tso, on debian-devel
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html