That gives me a good place to start.  Sounds so much easier to manage.  Much 
Thanks!

-Richard




________________________________
From: Craig Campbell <craig.campb...@ccraft.ca>
To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Sent: Wed, March 16, 2011 2:44:01 PM
Subject: Re: same username different password on different NAS

Sound like a configuration (a job for :> ) "realms".
Each location would be a different realm, so the seemingly overlapping
username "manger" would in fact be a unique "manager@realm-X".

Thoughts?
-craig

On Wednesday, March 16, 2011, Richard Thornton <rtho...@yahoo.com> wrote:
> I am just learning about freeradius now, and would like to see if I can use 
> it 
>to manage access and logging for users at a few hundred locations.  Each 
>remote 
>office has between 1 and 50 users, and at first glance freeradius will do the 
>job, but I just noticed a problem with overlapping usernames.  I am not sure 
>if 
>I need to use virtual servers, or if there is a better / easier way.
>
> The problem is that each location may have a user with the same login name as 
> a 
>different location.  For a simple example, each site could have a login of 
>"manager", but the manager username at each site would probably pair up with a 
>different password.
>
> Without using virtual servers, is there a way to link the username "manager" 
> to 
>the NAS name or IP of the location?  I'm picturing
>  something like the radcheck table containing an additional field for NAS 
> such 
>that freeradius would key off the combined of NAS address and username fields, 
>rather than just the username field.
>
> I am not opposed to using virtual servers if that is a better idea, but I'm 
>worried about the overhead of several hundred of them...  Any ideas or 
>pointers 
>to docs would be appreciated.
>
> -Richard
>
>
>
>
>

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



      
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to