Aqeel Anwar <[EMAIL PROTECTED]> wrote: > 1. How to define gorups in Radius?
You don't have to. You can use Unix groups. Or, you can use the latest CVS and rlm_passwd to define your own group file, just for use by freeradius. See 'radiusd.conf' for details. > 2. After defining a group, How can I say that a > perticular user is a member of this group? Use the 'Group' attribute. There are examples in the FAQ. > 3. In Unix or NT/2000, we assign at least one group to > a user. My suggetions is: we defing a group in unix or > NT say "testgroup" and assign this group to user foo. > Then we define the same group "testgroup" in radius > and do not define in radius that the user foo is > member of this group. When the user foo logs in, > radius automatically checks that the user foo is > member of group "testgroup" and so it gives him the > right of group "testgroup" which we defined in radius. > If that group is not defined in radius, then it looks > for default clause. In this way, we can keep the users > file in radius as small as possible. There's examples in the FAQ which do that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
