i'm trying migrate to freeradius (0.9.1)
one of the objectives is have separate user lists per NAS.
e.g. only users A, B and C can use NAS 1.1.1.1 whereas user A, D, and E
can use 1.1.1.2. ideally when you connect to 1.1.1.1 and enter the
username/password for user E, the radius server should just say "no"
since that user isnt associated with that NAS.
i'm using authorise { sql } and i've hacked this by modifying radcheck
and radreply to include a column for the radius client IP address. i
then modified the authorize_*_query to include some sql to limit results
to radClient = '%{NAS-IP-Address}'. this seems to work but i'm new to
freeradius and perhaps this isnt the best way to do it.
thanks for any comments,
jeff
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
