Pete Ashdown wrote: > I'm trying to restrict a guest user from a single NAS-IP-Address via "users" > and I can't get it to work. > > Doesn't work: > > test NAS-IP-Address == "127.0.0.1" > Auth-Type := Accept
That's wrong. Why? See the debug output. It *tells* you what's wrong, and how to fix it. See "man users". It *documents* the format of the "users" file. See the sample "raddb/users" file. Look for "Auth-Type". There are *examples* of how to do this. > Also, how would I do this for a group of NAS IP addresses? Is it possible to > assign them to a group in "clients.conf" that can be later checked against in > "users"? See raddb/huntgroups. You can group NASes, and check the group membership later. > Where is the documentation of what can be tested against in the > "users" file? What does that mean? "man users" describes how the "users" file works. After that, if you get something wrong, the debug output will tell you. You *did* run the server in debugging mode, as suggested in the FAQ, README, "man" page, and daily on this list? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
