On Tue, May 17, 2011 at 6:41 PM, Abbas Yazdanpanah <[email protected]> wrote: > Dear all, > > > There is a NAS and I want to authenticate users. I have two resources, > the first one the is Internet and the second is an intranet. I've two > access policies regarding to each source. for example a policy is > "users have different bandwidth for accessing each source". I've a > proprietary radius server and have used its scripting abilities to set > the second resource policy. It must be said that the second resource > policy is identical for all users. It has been decided to migrate our > system to freeRadius (due to the expenses) and also there is a change > in policies so the second resource policy is not identical for all > users any more. Due to my lack deep experience in freeRadius, I was > wondering if there is any suggestion that would help me about this > scenario.
Read the documentation? Seriously. Whoever "decided to migrate our system to freeRadius" should've done their homework first, and at least know the general idea about: - whether freeradius is suitable for a particular purpose, and - how you're going to do it Depending on your needs, something as simple as users file might be suitable (run "man 5 users" once you have freeradius installed). You might be able to create policies based on something like NAS-IP-address attribute. For more complex configuration, sql or unlang might come in handy. The default configuration file is pretty well commented, start from there. Then continue to the included doc/ directory (or read latest version online from https://github.com/alandekok/freeradius-server/tree/v2.1.x/doc) -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

