On Thu, 20 Nov 2003, Bill Thompson wrote:

> On Wed, 19 Nov 2003 16:49:22 -0500
> "Dan Didier" <[EMAIL PROTECTED]> wrote:
>
> > Do you use group functions, or is everyone in the base group?
> >
> > Thanks,
> > Dan
> >
>
> I am using FreeRadius with the VPN 3000. I have groups authenticating in
> the concentrator and user authentication through radius. The down side to
> this is that you can not lock users into a group and must rely on the
> group settings in the client for security.
>
> --
> Bill Thompson
> [EMAIL PROTECTED]
> GPG Key ID:0xFB966670
>
> -


You can lock them in using the Class attribute.

example reply would include

Class = "OU=thisgroup.com;"

Check out

http://www.cisco.com/warp/public/471/altigagroup.html

It shows you how.



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to