Does anyone know of a way to authenticate most users locally, but redirect
some users to another radius server for authentication based on the login
domain name specified by the user? I am using FreeRadius on a Debian box.
Local authentication works properly, but I need to have some users
authenticate from a different system based on the domain they are trying to
log into. Any help is greatly appreciated.
I tried DEFAULT Suffix =~ "@abc.com$", Auth-Type := Accept and it
still tries to authenticate locally
/etc/radius/users;
# for abc.com domain
DEFAULT Suffix =~ "@abc.com$", Auth-Type := Accept
Service-Type = Outbound-User,
Cisco-AVPair = "vpdn:ip-addresses=1.2.3.4",
Cisco-AVPair += "vpdn:tunnel-type=l2tp"
Warren
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
