two user authentication groups for one AS

2010-01-09 Thread Eric
Yes you are right but I have some problems in config: I set a vpn server address in client.conf and in users as: DEFAULT Client-IP-Address == 192.168.20.13, Auth-Type := Vpn, Autz-Type := Vpn, in radiusd.conf: ldap ldap-Vpn{ server = 192.168.10.1 .

two user authentication groups for one AS

2010-01-04 Thread Eric
My users differ in ldap attributes and all come from one AS. I want session-timeout of some users to be the value of counter and for others the session-timeout that I define in freeradius for them. How should I distinct them? - List info/subscribe/unsubscribe? See

Re: two user authentication groups for one AS

2010-01-02 Thread Eric
My users differ in ldap attributes. I want session-timeout of some users to be the value of counter and for others the session-timeout that I define in freeradius for them. How should I distinct them? Excuse me. The packets from vpn server to ldap-1 are the same as ldap-2. OK... I want

Re: two user authentication groups for one AS

2010-01-02 Thread Eric
On Sat, Jan 2, 2010 at 1:59 PM, Eric bbah...@gmail.com wrote: My users differ in ldap attributes. I want session-timeout of some users to be the value of counter and for others the session-timeout that I define in freeradius for them. How should I distinct them? Excuse me. The packets

Re: two user authentication groups for one AS

2010-01-02 Thread tnt
My users differ in ldap attributes. I want session-timeout of some users to be the value of counter and for others the session-timeout that I define in freeradius for them. How should I distinct them? How will you tell them apart? Think of how you will get user 1 to use ldap-1, and

two user authentication groups for one AS

2009-12-30 Thread Eric
Hi There is one VPN server that I want to authenticate some of its users with ldap-1 and others with ldap-2. how should I differ them? I defined: DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-1, Autz-Type := Vpn DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-2,

Re: two user authentication groups for one AS

2009-12-30 Thread Alan DeKok
Eric wrote: Hi There is one VPN server that I want to authenticate some of its users with ldap-1 and others with ldap-2. how should I differ them? What is different about the packets for users in ldap-1, and users in ldap-2? I defined: DEFAULT Client-IP-Address == 192.168.200.21,

Re: two user authentication groups for one AS

2009-12-30 Thread Eric
access-attr is differ for two group users. Hi There is one VPN server that I want to authenticate some of its users with ldap-1 and others with ldap-2. how should I differ them? What is different about the packets for users in ldap-1, and users in ldap-2? I defined: DEFAULT

Re: two user authentication groups for one AS

2009-12-30 Thread Alan DeKok
Eric wrote: access-attr is differ for two group users. Perhaps you should try reading my message again. If you don't understand it, ask questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: two user authentication groups for one AS

2009-12-30 Thread Eric
Excuse me. The packets from vpn server to ldap-1 are the same as ldap-2. I want only in freeradius.org have ldap ldap-1 and ldap-2 for theses users. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: two user authentication groups for one AS

2009-12-30 Thread Alan DeKok
Eric wrote: Excuse me. The packets from vpn server to ldap-1 are the same as ldap-2. OK... I want only in freeradius.org have ldap ldap-1 and ldap-2 for theses users. How will you tell them apart? Think of how you will get user 1 to use ldap-1, and user 2 to use ldap-2.