Chris Parker wrote:
Rok Papez wrote:
What is the best way to "block" the NULL realm ? Blocking of any realm would also be very usefull if users from some other realm wouldn't be allowed to log into this network.
I've added a realm option that blocks a certain realm. This way I can deny access for users from certain realms and when used with a NULL realm, users are forced to always specify a @realm with their username :).
What's wrong with putting this in the 'users' file:
DEFAULT Realm == NULL, Auth-Type := Reject Fall-Through = No
Now that you mentioned it... :)) not much except:
1. I couldn't find this solution even after RTFMing extensively in ./doc and googling for it (it was easier to code the required functionality :-/)
2. You still need to configure realm NULL as LOCAL and split configuration for this in two seperate files. If we have "notrealm" and it's actualy a no-op we can also have "blocked" ;)).
-- Lep pozdrav, Rok Papez.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
