> We just don't have enough information to make a decision. If the query > returns id,Username,Attribute, op, value sorted by id, perhaps we > could. If the attributes were > san0001 Cleartext-Password := santi1 > san0001 NAS-IP-Address == 123.123.123.123 > san0001 Cleartext-Password := santi2 > san0001 NAS-IP-Address == 234.234.234.234 > It might make sense to have different passwords on different NAS boxes.
You can make adjusments for such a case. Extend radcheck schema with field for NAS-IP-Address and change radcheck query to include it's value. This does make sense. But a list of possible passwords for a single user ... Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
