Hi Lucas,

Le Vendredi 29 Avril 2005 16:50, Lucas Aimaretto a écrit :
>
> You can allways receive the IP-Address ot the NAS in the NAS-IP-Address
> Attribute. You can ( because I've done it ) build an stored procedure on
> your sql engine and do some if-else structure where you validate your IP
> Address. If your NAS-IP-Address attribute is IP-A, you return IP address
> in 192.168.201.0/24. If IP-B, then 192.168.200.0/24.
>

Stored procedure is a nice tweak. Indeed, i have my users in a mysql database.

> for example .... in my mssql.conf I have ....
>
> authorize_check_query = "rad_authorize_check_query
> '%{Stripped-User-Name:-%{User-Name}}'"
>
> rad_authorize_check_query is an stored procedure. I only provide the
> username, but inside the storedprocedure I make lots of checks .... do
> you follow me ????

Yes, but how can you verify the username against the NAS-IP-Address, if you 
only provide the username to your stored procedure ? 
(That's what i understand...)

Thanks a lot. I am progressing.. I didn't know that FreeRadius could do so 
much !

Ben.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to