I'm sorry if this is a basic question here.  I just set up freeradius,
using it to authenticate to network devices (instead local auth).  I got
it up almost fine.  In my raddb/users file, i have the following:

test Auth-Type := Local, User-Password == "test", Simultaneous-Use :=
10, Calling-Station-Id == "10.19.5.1"
       Service-Type = Login,
       cisco-avpair="shell:priv-lvl=15"

I understand that in the first line i can set up conditions, separated
by commas which all have to be true to permit login.  How can i set up
an OR condition?  I'm thinking about letting more IP-s in via radius,
not only allowing login from ip 10.19.5.1.



You can use regular expressions. The =~ operator indicates this. For example:

test Auth-Type := Local, User-Password == "test", Simultaneous-Use :=
10, Calling-Station-Id =~ "(10.19.5.1|10.19.5.2)"
       Service-Type = Login,
       cisco-avpair="shell:priv-lvl=15"


Hope that helps, Keith Yoder


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to