On Thu, 24 Jan 2002 13:49:29 +0100
Stig Andersson <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I'm using Freeradius 0.3 and Mysql, working great.
>
> Problem:
> For any user who misspelled either their username or password,
> I would like to accept them anyway but provide different setting.
>
> This is how we set this up:
> ---
>
> Adam Auth-Type := Local, Password == "123"
> David Auth-Type := Local, Password == "456"
> Steve Auth-Type := Local, Password == "789"
>
> DEFAULT Auth-Type := Accept
> Service-Type = Framed-User,
> Framed-IP-Address = 192.168.0.1+,
> Framed-IP-Netmask = 255.255.255.255,
> ---
> If auth successful, they will be assigned IP by the NAS and all is great.
> If they misspell their username, they will be accepted anyway
> but get a local IP and their browser is directed to a page who
> informs them of the problem.
>
> However - if they misspell their PASSWORD - their login
> will fail.
>
> Anyone know how we can solve this?
I solved that problem using Framed-IP-Pool.
1) On your NAS set up two IP pools, one for "good" ips (authenticated users)
and one for "bad" ones, then
-- Replace "good" and "bad" with *your* pool ids!
Adam Auth-Type := Local, Password == "123"
Framed-IP-Pool = good,
Fall-Through: yes
David Auth-Type := Local, Password == "456"
Framed-IP-Pool = good,
Fall-Through = yes
Steve Auth-Type := Local, Password == "789"
Framed-IP-Pool = good,
Fall-Through = yes
and so on
then
DEFAULT Auth-Type := Accept
Service-Type = Framed-User,
Framed-IP-Pool = bad
<..FOO..>
On some NASes the right attribute to use is not Framed-IP-Pool but
something similar. Look...
Try also
Framed-IP-Address = <something good>+, instead of
Framed-IP-Pool= good
and
Framed-IP-Address = 192.168.0.1+, instead of
Framed-IP-Pool = bad
> If we add Fall-through - this will cause everyone
> to be assigned local IP through the DEFAULT group,
> so that doesn't work...
>
> Regards
> Stig Andersson
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
Nicola Orru'
------------------------------------------------------------------------
ENERGIT
Via Efisio Melis, 26
09134 Cagliari - Italia
Tel. +39 070 7521 317 Fax +39 070 7521 51
www.energit.it
Energia Telefonia Servizi Internet Sistemi di Gestione per le Aziende
------------------------------------------------------------------------
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
