Hello Chris -
On Thu, 04 Nov 1999, Chris M wrote:
> Kind of advanced application I think.
>
> I'm under the impression that I can use Client-Id to force a Check Item:
>
> luser Auth-Type = System, Client-Id = /someplace\.com$/
>
> This should force the RADIUS request for authentication to come from
> a NAS IP address in the someplace.com domain, right?
>
No, I'm afraid not. The Client-Id check item will match the string following
the word "Client" in one of your <Client xxx> clauses. In other words, if you
have a Client called fred.com, you will be able to have Client-Id = fred.com:
# Here is a Client definition
<Client fred.com>
Secret ....
....
</Client>
# Here is a Handler for fred.com
<Handler Client-Id = fred.com>
....
</Handler>
Note that the string "fred.com" in this example could equally well be an IP
address (but must be the same in both places). Note also that the check item can
appear anywhere (like a users file) not just a Handler clause.
See Section 13.1.15 in the Radiator 2.14.1 reference manual.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
