Re: frammed ip adress

2008-04-14 Thread David Hláčik
Hi, does my own ip - pools needs to be added to post-auth and to accounting
section?

Thanks!

D.

2008/4/6 Ivan Kalik [EMAIL PROTECTED]:

 ldap looks fine to me, but I don't use it.

 Ivan Kalik
 Kalik Informatika ISP


 Dana 6/4/2008, David Hláčik [EMAIL PROTECTED] piše:

 Thanks Ivan!,
 
 can i understand it like that my group structure in LDAP is okay, and
 there
 is only need to add those to users file and it will work?
 
 D.
 
 2008/4/5 Ivan Kalik [EMAIL PROTECTED]:
 
  DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters
 
  DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers
 
  Ivan Kalik
  Kalik Informatika ISP
 
 
  Dana 5/4/2008, David Hláčik [EMAIL PROTECTED] piše:
 
  Hi,
  
  i will describe what i am trying to achieve.
  
  This is my sample ldap structure
  
  users (inetOrgPerson) :
  
  
  cn=User1,ou=Users,o=Polarion
  cn=User2,ou=Users,o=Polarion
  cn=UserA,ou=Users,o=Polarion
  cn=UserB,ou=Users,o=Polariong
  groups (GroupOfNames)
  
  cn=GroupNumbers,ou=Groups,o=Polarion
member=cn=User1,ou=Users,o=Polarion
member=cn=User2,ou=Users,o=Polarion
  
   cn=GroupLetters,ou=Groups,o=Polarion
member=cn=UserA,ou=Users,o=Polarion
member=cn=UserB,ou=Users,o=Polarion
  
  I want to be able to assign different poll-name per group
  
  for GroupNumbers Pool-Name number
  for GroupLetters Pool-Name letters
  
  How can i achieve this without adding any attribute to user entry?
 (users
  have access to their dn, so they will be able to change it - this is
 what
  i
  want to block! , i know i can set readonly access in slapd.conf, but
 this
  is
  not what i want)
  
  1) One scenario i was thinking of is to add in radius to users file :
  
  DEFAULT Pool-Name == numbers, Ldap-Group
  == cn=GroupNumbers,ou=Groups,o=Polarion
Fall-Through = no
  
  DEFAULT NAS-Port-Type == letters, Ldap-Group ==
  cn=GroupLetters,ou=Groups,o=Polarion
Fall-Through = no
  
  But what i need to add to ldap - configuration part in order to make
 it
  work?
  
  Thanks very very much for help!
  
  Regards,
  
  David
  On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:
  
   So if i understand clear a i need to name and configure ip pool
 parts
  in
   radius.conf and than use this name as a Pool-Name in LDAp P?
  
   Yes.
  
   Is there a
   chance to specify range directly in LDAP and not in ip pool?
   
  
   No, but there is sqlippool. Or use DHCP on your NAS. Or define IP
 pools
   on the NAS and select them with Framed-Pool if your NAS supports it.
   Cisco doesn't but you can set IP pool with avpairs.
  
   Ivan Kalik
   Kalik Informatika ISP
  
-
   List info/subscribe/unsubscribe? See
   http://www.freeradius.org/list/users.html
  
  
  
 
  -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 
 

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-14 Thread David Hláčik
Can i before :

DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters
DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers
add

DEFAULT Pool-Name := vpn_main

which will asign vpn_main pool to all other groups not defined in users
file?

Thanks!

2008/4/6 Ivan Kalik [EMAIL PROTECTED]:

 ldap looks fine to me, but I don't use it.

 Ivan Kalik
 Kalik Informatika ISP


 Dana 6/4/2008, David Hláčik [EMAIL PROTECTED] piše:

 Thanks Ivan!,
 
 can i understand it like that my group structure in LDAP is okay, and
 there
 is only need to add those to users file and it will work?
 
 D.
 
 2008/4/5 Ivan Kalik [EMAIL PROTECTED]:
 
  DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters
 
  DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers
 
  Ivan Kalik
  Kalik Informatika ISP
 
 
  Dana 5/4/2008, David Hláčik [EMAIL PROTECTED] piše:
 
  Hi,
  
  i will describe what i am trying to achieve.
  
  This is my sample ldap structure
  
  users (inetOrgPerson) :
  
  
  cn=User1,ou=Users,o=Polarion
  cn=User2,ou=Users,o=Polarion
  cn=UserA,ou=Users,o=Polarion
  cn=UserB,ou=Users,o=Polariong
  groups (GroupOfNames)
  
  cn=GroupNumbers,ou=Groups,o=Polarion
member=cn=User1,ou=Users,o=Polarion
member=cn=User2,ou=Users,o=Polarion
  
   cn=GroupLetters,ou=Groups,o=Polarion
member=cn=UserA,ou=Users,o=Polarion
member=cn=UserB,ou=Users,o=Polarion
  
  I want to be able to assign different poll-name per group
  
  for GroupNumbers Pool-Name number
  for GroupLetters Pool-Name letters
  
  How can i achieve this without adding any attribute to user entry?
 (users
  have access to their dn, so they will be able to change it - this is
 what
  i
  want to block! , i know i can set readonly access in slapd.conf, but
 this
  is
  not what i want)
  
  1) One scenario i was thinking of is to add in radius to users file :
  
  DEFAULT Pool-Name == numbers, Ldap-Group
  == cn=GroupNumbers,ou=Groups,o=Polarion
Fall-Through = no
  
  DEFAULT NAS-Port-Type == letters, Ldap-Group ==
  cn=GroupLetters,ou=Groups,o=Polarion
Fall-Through = no
  
  But what i need to add to ldap - configuration part in order to make
 it
  work?
  
  Thanks very very much for help!
  
  Regards,
  
  David
  On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:
  
   So if i understand clear a i need to name and configure ip pool
 parts
  in
   radius.conf and than use this name as a Pool-Name in LDAp P?
  
   Yes.
  
   Is there a
   chance to specify range directly in LDAP and not in ip pool?
   
  
   No, but there is sqlippool. Or use DHCP on your NAS. Or define IP
 pools
   on the NAS and select them with Framed-Pool if your NAS supports it.
   Cisco doesn't but you can set IP pool with avpairs.
  
   Ivan Kalik
   Kalik Informatika ISP
  
-
   List info/subscribe/unsubscribe? See
   http://www.freeradius.org/list/users.html
  
  
  
 
  -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 
 

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-14 Thread Ivan Kalik
Hi, does my own ip - pools needs to be added to post-auth and to accounting
section?


Yes.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: frammed ip adress

2008-04-14 Thread David Hláčik
I will configure ippool vpn_main_pool { } in radius.conf
If i will use it in accounting section ( vpn_main_pool ) i will get
following error :]

adiusd.conf[1685]: vpn_main_pool: Module instantiation failed.
radiusd.conf[2112] Unknown module vpn_main_pool.
radiusd.conf[2089] Failed to parse accounting section.

D.

2008/4/14 David Hláčik [EMAIL PROTECTED]:

 Can i before :

 DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters
 DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers
 add

 DEFAULT Pool-Name := vpn_main

 which will asign vpn_main pool to all other groups not defined in users
 file?

 Thanks!

 2008/4/6 Ivan Kalik [EMAIL PROTECTED]:

 ldap looks fine to me, but I don't use it.
 
  Ivan Kalik
  Kalik Informatika ISP
 
 
  Dana 6/4/2008, David Hláčik [EMAIL PROTECTED] piše:
 
  Thanks Ivan!,
  
  can i understand it like that my group structure in LDAP is okay, and
  there
  is only need to add those to users file and it will work?
  
  D.
  
  2008/4/5 Ivan Kalik [EMAIL PROTECTED]:
  
   DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters
  
   DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers
  
   Ivan Kalik
   Kalik Informatika ISP
  
  
   Dana 5/4/2008, David Hláčik [EMAIL PROTECTED] piše:
  
   Hi,
   
   i will describe what i am trying to achieve.
   
   This is my sample ldap structure
   
   users (inetOrgPerson) :
   
   
   cn=User1,ou=Users,o=Polarion
   cn=User2,ou=Users,o=Polarion
   cn=UserA,ou=Users,o=Polarion
   cn=UserB,ou=Users,o=Polariong
   groups (GroupOfNames)
   
   cn=GroupNumbers,ou=Groups,o=Polarion
 member=cn=User1,ou=Users,o=Polarion
 member=cn=User2,ou=Users,o=Polarion
   
cn=GroupLetters,ou=Groups,o=Polarion
 member=cn=UserA,ou=Users,o=Polarion
 member=cn=UserB,ou=Users,o=Polarion
   
   I want to be able to assign different poll-name per group
   
   for GroupNumbers Pool-Name number
   for GroupLetters Pool-Name letters
   
   How can i achieve this without adding any attribute to user entry?
  (users
   have access to their dn, so they will be able to change it - this is
  what
   i
   want to block! , i know i can set readonly access in slapd.conf, but
  this
   is
   not what i want)
   
   1) One scenario i was thinking of is to add in radius to users file
  :
   
   DEFAULT Pool-Name == numbers, Ldap-Group
   == cn=GroupNumbers,ou=Groups,o=Polarion
 Fall-Through = no
   
   DEFAULT NAS-Port-Type == letters, Ldap-Group ==
   cn=GroupLetters,ou=Groups,o=Polarion
 Fall-Through = no
   
   But what i need to add to ldap - configuration part in order to make
  it
   work?
   
   Thanks very very much for help!
   
   Regards,
   
   David
   On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:
   
So if i understand clear a i need to name and configure ip pool
  parts
   in
radius.conf and than use this name as a Pool-Name in LDAp P?
   
Yes.
   
Is there a
chance to specify range directly in LDAP and not in ip pool?

   
No, but there is sqlippool. Or use DHCP on your NAS. Or define IP
  pools
on the NAS and select them with Framed-Pool if your NAS supports
  it.
Cisco doesn't but you can set IP pool with avpairs.
   
Ivan Kalik
Kalik Informatika ISP
   
 -
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
   
   
   
  
   -
   List info/subscribe/unsubscribe? See
   http://www.freeradius.org/list/users.html
  
  
 
  -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-14 Thread Ivan Kalik
Can i before :

DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters
DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers
add

DEFAULT Pool-Name := vpn_main

which will asign vpn_main pool to all other groups not defined in users
file?


No. You should add it after those entries in users file. If you add it
before all users will get addresses from vpn_main.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: frammed ip adress

2008-04-14 Thread Ivan Kalik

adiusd.conf[1685]: vpn_main_pool: Module instantiation failed.

You haven't configured the pool properly.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: frammed ip adress

2008-04-06 Thread David Hláčik
Thanks Ivan!,

can i understand it like that my group structure in LDAP is okay, and there
is only need to add those to users file and it will work?

D.

2008/4/5 Ivan Kalik [EMAIL PROTECTED]:

 DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters

 DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers

 Ivan Kalik
 Kalik Informatika ISP


 Dana 5/4/2008, David Hláčik [EMAIL PROTECTED] piše:

 Hi,
 
 i will describe what i am trying to achieve.
 
 This is my sample ldap structure
 
 users (inetOrgPerson) :
 
 
 cn=User1,ou=Users,o=Polarion
 cn=User2,ou=Users,o=Polarion
 cn=UserA,ou=Users,o=Polarion
 cn=UserB,ou=Users,o=Polariong
 groups (GroupOfNames)
 
 cn=GroupNumbers,ou=Groups,o=Polarion
   member=cn=User1,ou=Users,o=Polarion
   member=cn=User2,ou=Users,o=Polarion
 
  cn=GroupLetters,ou=Groups,o=Polarion
   member=cn=UserA,ou=Users,o=Polarion
   member=cn=UserB,ou=Users,o=Polarion
 
 I want to be able to assign different poll-name per group
 
 for GroupNumbers Pool-Name number
 for GroupLetters Pool-Name letters
 
 How can i achieve this without adding any attribute to user entry? (users
 have access to their dn, so they will be able to change it - this is what
 i
 want to block! , i know i can set readonly access in slapd.conf, but this
 is
 not what i want)
 
 1) One scenario i was thinking of is to add in radius to users file :
 
 DEFAULT Pool-Name == numbers, Ldap-Group
 == cn=GroupNumbers,ou=Groups,o=Polarion
   Fall-Through = no
 
 DEFAULT NAS-Port-Type == letters, Ldap-Group ==
 cn=GroupLetters,ou=Groups,o=Polarion
   Fall-Through = no
 
 But what i need to add to ldap - configuration part in order to make it
 work?
 
 Thanks very very much for help!
 
 Regards,
 
 David
 On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:
 
  So if i understand clear a i need to name and configure ip pool parts
 in
  radius.conf and than use this name as a Pool-Name in LDAp P?
 
  Yes.
 
  Is there a
  chance to specify range directly in LDAP and not in ip pool?
  
 
  No, but there is sqlippool. Or use DHCP on your NAS. Or define IP pools
  on the NAS and select them with Framed-Pool if your NAS supports it.
  Cisco doesn't but you can set IP pool with avpairs.
 
  Ivan Kalik
  Kalik Informatika ISP
 
   -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 
 
 

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-06 Thread Ivan Kalik
ldap looks fine to me, but I don't use it.

Ivan Kalik
Kalik Informatika ISP


Dana 6/4/2008, David Hláčik [EMAIL PROTECTED] piše:

Thanks Ivan!,

can i understand it like that my group structure in LDAP is okay, and there
is only need to add those to users file and it will work?

D.

2008/4/5 Ivan Kalik [EMAIL PROTECTED]:

 DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters

 DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers

 Ivan Kalik
 Kalik Informatika ISP


 Dana 5/4/2008, David Hláčik [EMAIL PROTECTED] piše:

 Hi,
 
 i will describe what i am trying to achieve.
 
 This is my sample ldap structure
 
 users (inetOrgPerson) :
 
 
 cn=User1,ou=Users,o=Polarion
 cn=User2,ou=Users,o=Polarion
 cn=UserA,ou=Users,o=Polarion
 cn=UserB,ou=Users,o=Polariong
 groups (GroupOfNames)
 
 cn=GroupNumbers,ou=Groups,o=Polarion
   member=cn=User1,ou=Users,o=Polarion
   member=cn=User2,ou=Users,o=Polarion
 
  cn=GroupLetters,ou=Groups,o=Polarion
   member=cn=UserA,ou=Users,o=Polarion
   member=cn=UserB,ou=Users,o=Polarion
 
 I want to be able to assign different poll-name per group
 
 for GroupNumbers Pool-Name number
 for GroupLetters Pool-Name letters
 
 How can i achieve this without adding any attribute to user entry? (users
 have access to their dn, so they will be able to change it - this is what
 i
 want to block! , i know i can set readonly access in slapd.conf, but this
 is
 not what i want)
 
 1) One scenario i was thinking of is to add in radius to users file :
 
 DEFAULT Pool-Name == numbers, Ldap-Group
 == cn=GroupNumbers,ou=Groups,o=Polarion
   Fall-Through = no
 
 DEFAULT NAS-Port-Type == letters, Ldap-Group ==
 cn=GroupLetters,ou=Groups,o=Polarion
   Fall-Through = no
 
 But what i need to add to ldap - configuration part in order to make it
 work?
 
 Thanks very very much for help!
 
 Regards,
 
 David
 On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:
 
  So if i understand clear a i need to name and configure ip pool parts
 in
  radius.conf and than use this name as a Pool-Name in LDAp P?
 
  Yes.
 
  Is there a
  chance to specify range directly in LDAP and not in ip pool?
  
 
  No, but there is sqlippool. Or use DHCP on your NAS. Or define IP pools
  on the NAS and select them with Framed-Pool if your NAS supports it.
  Cisco doesn't but you can set IP pool with avpairs.
 
  Ivan Kalik
  Kalik Informatika ISP
 
   -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 
 
 

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: frammed ip adress

2008-04-05 Thread David Hláčik
Hi,

i will describe what i am trying to achieve.

This is my sample ldap structure

users (inetOrgPerson) :


cn=User1,ou=Users,o=Polarion
cn=User2,ou=Users,o=Polarion
cn=UserA,ou=Users,o=Polarion
cn=UserB,ou=Users,o=Polariong
groups (GroupOfNames)

cn=GroupNumbers,ou=Groups,o=Polarion
  member=cn=User1,ou=Users,o=Polarion
  member=cn=User2,ou=Users,o=Polarion

 cn=GroupLetters,ou=Groups,o=Polarion
  member=cn=UserA,ou=Users,o=Polarion
  member=cn=UserB,ou=Users,o=Polarion

I want to be able to assign different poll-name per group

for GroupNumbers Pool-Name number
for GroupLetters Pool-Name letters

How can i achieve this without adding any attribute to user entry? (users
have access to their dn, so they will be able to change it - this is what i
want to block! , i know i can set readonly access in slapd.conf, but this is
not what i want)

1) One scenario i was thinking of is to add in radius to users file :

DEFAULT Pool-Name == numbers, Ldap-Group
== cn=GroupNumbers,ou=Groups,o=Polarion
  Fall-Through = no

DEFAULT NAS-Port-Type == letters, Ldap-Group ==
cn=GroupLetters,ou=Groups,o=Polarion
  Fall-Through = no

But what i need to add to ldap - configuration part in order to make it
work?

Thanks very very much for help!

Regards,

David
On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:

 So if i understand clear a i need to name and configure ip pool parts in
 radius.conf and than use this name as a Pool-Name in LDAp P?

 Yes.

 Is there a
 chance to specify range directly in LDAP and not in ip pool?
 

 No, but there is sqlippool. Or use DHCP on your NAS. Or define IP pools
 on the NAS and select them with Framed-Pool if your NAS supports it.
 Cisco doesn't but you can set IP pool with avpairs.

 Ivan Kalik
 Kalik Informatika ISP

  -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-05 Thread David Hláčik
Sorry for that mistake in last lines

DEFAULT NAS-Port-Type == letters, Ldap-Group ==
cn=GroupLetters,ou=Groups,o=Polarion
  Fall-Through = no

*DEFAULT Pool-Name == letters, Ldap-Group ==
cn=GroupLetters,ou=Groups,o=Polarion
  Fall-Through = no

On Sat, Apr 5, 2008 at 4:38 PM, David Hláčik [EMAIL PROTECTED] wrote:

 Hi,

 i will describe what i am trying to achieve.

 This is my sample ldap structure

 users (inetOrgPerson) :


 cn=User1,ou=Users,o=Polarion
 cn=User2,ou=Users,o=Polarion
 cn=UserA,ou=Users,o=Polarion
 cn=UserB,ou=Users,o=Polariong
 groups (GroupOfNames)

 cn=GroupNumbers,ou=Groups,o=Polarion
   member=cn=User1,ou=Users,o=Polarion
   member=cn=User2,ou=Users,o=Polarion

  cn=GroupLetters,ou=Groups,o=Polarion
   member=cn=UserA,ou=Users,o=Polarion
   member=cn=UserB,ou=Users,o=Polarion

 I want to be able to assign different poll-name per group

 for GroupNumbers Pool-Name number
 for GroupLetters Pool-Name letters

 How can i achieve this without adding any attribute to user entry? (users
 have access to their dn, so they will be able to change it - this is what i
 want to block! , i know i can set readonly access in slapd.conf, but this is
 not what i want)

 1) One scenario i was thinking of is to add in radius to users file :

 DEFAULT Pool-Name == numbers, Ldap-Group
 == cn=GroupNumbers,ou=Groups,o=Polarion
   Fall-Through = no

 DEFAULT NAS-Port-Type == letters, Ldap-Group ==
 cn=GroupLetters,ou=Groups,o=Polarion
   Fall-Through = no

 But what i need to add to ldap - configuration part in order to make it
 work?

 Thanks very very much for help!

 Regards,

 David
   On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:

  So if i understand clear a i need to name and configure ip pool parts
  in
  radius.conf and than use this name as a Pool-Name in LDAp P?
 
  Yes.
 
  Is there a
  chance to specify range directly in LDAP and not in ip pool?
  
 
  No, but there is sqlippool. Or use DHCP on your NAS. Or define IP pools
  on the NAS and select them with Framed-Pool if your NAS supports it.
  Cisco doesn't but you can set IP pool with avpairs.
 
  Ivan Kalik
  Kalik Informatika ISP
 
   -
  List info/subscribe/unsubscribe? See
  http://www.freeradius.org/list/users.html
 


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-05 Thread Ivan Kalik
DEFAULT   Ldap-Group == GroupLetters, Pool-Name := letters

DEFAULT   Ldap-Group == GroupNumbers, Pool-Name := numbers

Ivan Kalik
Kalik Informatika ISP


Dana 5/4/2008, David Hláčik [EMAIL PROTECTED] piše:

Hi,

i will describe what i am trying to achieve.

This is my sample ldap structure

users (inetOrgPerson) :


cn=User1,ou=Users,o=Polarion
cn=User2,ou=Users,o=Polarion
cn=UserA,ou=Users,o=Polarion
cn=UserB,ou=Users,o=Polariong
groups (GroupOfNames)

cn=GroupNumbers,ou=Groups,o=Polarion
  member=cn=User1,ou=Users,o=Polarion
  member=cn=User2,ou=Users,o=Polarion

 cn=GroupLetters,ou=Groups,o=Polarion
  member=cn=UserA,ou=Users,o=Polarion
  member=cn=UserB,ou=Users,o=Polarion

I want to be able to assign different poll-name per group

for GroupNumbers Pool-Name number
for GroupLetters Pool-Name letters

How can i achieve this without adding any attribute to user entry? (users
have access to their dn, so they will be able to change it - this is what i
want to block! , i know i can set readonly access in slapd.conf, but this is
not what i want)

1) One scenario i was thinking of is to add in radius to users file :

DEFAULT Pool-Name == numbers, Ldap-Group
== cn=GroupNumbers,ou=Groups,o=Polarion
  Fall-Through = no

DEFAULT NAS-Port-Type == letters, Ldap-Group ==
cn=GroupLetters,ou=Groups,o=Polarion
  Fall-Through = no

But what i need to add to ldap - configuration part in order to make it
work?

Thanks very very much for help!

Regards,

David
On Wed, Apr 2, 2008 at 12:13 PM, Ivan Kalik [EMAIL PROTECTED] wrote:

 So if i understand clear a i need to name and configure ip pool parts in
 radius.conf and than use this name as a Pool-Name in LDAp P?

 Yes.

 Is there a
 chance to specify range directly in LDAP and not in ip pool?
 

 No, but there is sqlippool. Or use DHCP on your NAS. Or define IP pools
 on the NAS and select them with Framed-Pool if your NAS supports it.
 Cisco doesn't but you can set IP pool with avpairs.

 Ivan Kalik
 Kalik Informatika ISP

  -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: frammed ip adress

2008-04-02 Thread David Hláčik
Thanks Ivan

So if i understand clear a i need to name and configure ip pool parts in
radius.conf and than use this name as a Pool-Name in LDAp P? Is there a
chance to specify range directly in LDAP and not in ip pool?

Thanks!

D.

2008/3/26 Ivan Kalik [EMAIL PROTECTED]:

 Pool-Name. Have a look at ippool section of radiusd.conf.

 Ivan Kalik
 Kalik Informatika ISP


 Dana 25/3/2008, David Hláčik [EMAIL PROTECTED] piše:

 Hi, in my working solution,  i have pptp (vpn) configured with radius
 using
 LDAP.
 Each user has a value Framed IP Adress which will assign him exact IP
 adress.
 
 Currently i am rebuilding ldap structure to groups. And i want the users
 which will be members of group foo , to have dynamically assignet ip
 adresses from pool 10.123.40.0/255.255.255.0 . How can i achieve ? Which
 radius attributes should i use?
 
 Thanks a lot!
 
 

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-04-02 Thread Ivan Kalik
So if i understand clear a i need to name and configure ip pool parts in
radius.conf and than use this name as a Pool-Name in LDAp P? 

Yes.

Is there a
chance to specify range directly in LDAP and not in ip pool?


No, but there is sqlippool. Or use DHCP on your NAS. Or define IP pools
on the NAS and select them with Framed-Pool if your NAS supports it.
Cisco doesn't but you can set IP pool with avpairs.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


frammed ip adress

2008-03-25 Thread David Hláčik
Hi, in my working solution,  i have pptp (vpn) configured with radius using
LDAP.
Each user has a value Framed IP Adress which will assign him exact IP
adress.

Currently i am rebuilding ldap structure to groups. And i want the users
which will be members of group foo , to have dynamically assignet ip
adresses from pool 10.123.40.0/255.255.255.0 . How can i achieve ? Which
radius attributes should i use?

Thanks a lot!
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: frammed ip adress

2008-03-25 Thread Ivan Kalik
Pool-Name. Have a look at ippool section of radiusd.conf.

Ivan Kalik
Kalik Informatika ISP


Dana 25/3/2008, David Hláčik [EMAIL PROTECTED] piše:

Hi, in my working solution,  i have pptp (vpn) configured with radius using
LDAP.
Each user has a value Framed IP Adress which will assign him exact IP
adress.

Currently i am rebuilding ldap structure to groups. And i want the users
which will be members of group foo , to have dynamically assignet ip
adresses from pool 10.123.40.0/255.255.255.0 . How can i achieve ? Which
radius attributes should i use?

Thanks a lot!



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html