Hi Tom -
On Sun, 31 Oct 1999, tom minchin wrote:
> On Sat, Oct 30, 1999 at 07:00:07AM -0600, Chris M wrote:
> > Is it a better practice to use IP addresses instead of names for
> > <Client>? What about using both (if DNS fails for some reason it can
> > check the IP)?
> >
>
> I suspect it doesn't make much difference, if DNS has failed then well
> probably other critical things are stuffed as well. If you want you
> can use Client DEFAULT and keep all your secrets (and NAS's) the same.
IMHO - you really want to list all of your Client's - a DEFAULT will make
tracking problems difficult and there is a security risk as well.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
