On Wed, Apr 17, 2013 at 05:04:11PM -0400, John Center wrote:
> it correctly, it looks like one could have a "profiles" file with
> individual named profiles defined containing NAS-specific text that
> would be sent back to the NAS as is upon successful authentication.
> Is anything like this still supported? Can the "User-Profile"
There are many ways of sending attributes back based on incoming
attributes (such as which NAS the request came from). One way
would be to just use an instantiation of the files module that
keys off the NAS-IP-Address:
files nasprofile {
key = "%{NAS-IP-Address}"
usersfile = ${confdir}/nas-profile
...
}
in the "nas-profile" file:
10.0.0.1
Reply-Message := "Welcome to NAS 1"
10.0.0.2
Reply-Message := "Welcome to NAS 2"
then call "nasprofile" in your sites-enabled/default authorize
section.
...or use one of the other multitude of methods just discussed in
the Idle-Timeout thread :-)
Matthew
--
Matthew Newton, Ph.D. <[email protected]>
Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <[email protected]>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
