Re: Using groups to configure access based on particular requesting radius server.

2004-12-27 Thread Alan DeKok
"Mike Cisar" <[EMAIL PROTECTED]> wrote: > Likewise is != valid here? Such that the following would be a valid > representation... > > DEFAULT Client-IP-Address == ip1.of.pool.a., Group != "poola", > Auth-Type := Reject Yes. > With only two pools I suppose it wouldn't really make much d

RE: Using groups to configure access based on particular requesting radius server.

2004-12-26 Thread Mike Cisar
Thanks Alan > > Denying from a group I can do... but how to deny from a group > > conditionally on which radius server the request is coming from is > > what I can't quite figure. > > DEFAULT Group == "poola", Client-IP-Address == ip.of.pool.a., Auth-Type := Reject I was sure it'd be som

Re: Using groups to configure access based on particular requesting radius server.

2004-12-25 Thread Alan DeKok
"Mike Cisar" <[EMAIL PROTECTED]> wrote: > My problem/question is this... is it possible to set up somehow so that I > can create a couple of Unix groups (call them poola and poolb) and then > control whether the login is denied partially on the RADIUS server that is > asking. I would suggest usi

Using groups to configure access based on particular requesting radius server.

2004-12-24 Thread Mike Cisar
I'm hoping someone may be able to give me some pointers or thoughts. I have a scenario where we have two separate external organizations who provide service to our dialup customers. Each of these companies has their own RADIUS servers which accept the request from whichever of the 1000's of NAS'