Maqbool Hashim <[EMAIL PROTECTED]> wrote:
> I'd like to know if it is possible to allow external customers limited 
> access to add users to our RADIUS configuration.

  Yes, but it's probably a bad idea.

> Is this possible?  I know this will involve realms, but how can we get 
> the customer to update the RADIUS configuration without giving them too 
> much access to the RADIUS files?

  You would be better of having the customers manage their own RADIUS
servers, and having you just proxy to those servers.

  If the customers don't want to manage their own servers, you can
still have a server locally, per-customer.  That way, you can give
each customer limited access to the SQL database, and be guaranteed
that they can't affect other customers.

  Put a proxying server in front of these other servers, and proxy
based on realms.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to