Hi, 
I would like to authorize a given user to some services depending on the
NAS he is connected to. Basically I would like to have something like
that :

user    Auth-Type :=EAP
        if 
                NAS-IP-Addr == 10.10.10.10
        then 
                AUTHORIZATION_AVP1 = x1,
                AUTHORIZATION_AVP2 = y1
        else
                AUTHORIZATION_AVP1 = x2,
                AUTHORIZATION_AVP2 = y2
        endif

I tried the following syntax :

user    Auth-Type := EAP
        NAS-IP-Addr == 10.10.10.10, Tunnel-Type = VLAN,
Tunnel-Medium-Type = dot1q, Tunnel-Private-Group-ID = MyVlan
        Fall-Through = 1
        NAS-IP-Addr != 10.10.10.10, Tunnel-Type = VLAN,
Tunnel-Medium-Type = dot1q, Tunnel-Private-Group-ID = MyOtherVlan       

I get the error : Parse error (reply) for entry user: expecting '=' ....
at the first line where I have DEFAULT NAS-IP-Addr == 10.10.10.10 .....

Please, can you help ?

In a more general case, is there a doc on the various operators (==, =,
:=, +=, etc) we can use une the "users" file ? any *complex* examples
somewhere ?

Many thanks
David.
        

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to