On Thu, 9 Oct 2003, Kristina Pfaff-Harris wrote:
> I'm sure I'm probably making this way too complicated, but I've been over
> and over the docs on proxy, simultaneous use, huntgroups, users etc, and
> I'm not getting anywhere. The closest I came was disabling simultaneous
> use for non-proxied users while leaving it enabled for proxied users,
> which is the exact opposite. :-) I tried flipping some things around, but
> no go.
As usual, as soon as I email, I hit myself in the head because I think of
a simple answer. :-)
I'd still like to know if this is possible in the configs, but actually,
since all the NASes that aren't ours are tagged as "nastype = other,"
seems like all I really have to do is change checkrad so that it goes:
} elsif ($ARGV[0] eq 'other') {
$ret = 0;
instead of
} elsif ($ARGV[0] eq 'other') {
$ret = 1;
In other words, just set it up so that if we can't query the NAS because
it's "other," assume that the database is lying about the person being
logged on instead of assuming it's telling the truth. :-)
Kristina
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html