use realms to access different mysql tables

2007-03-27 Thread Alexander Papenburg
Hi Freeradius-Mailing-List, does anyone of you differentiate sql database table with realms? E.g.: Auth-Requests for [EMAIL PROTECTED] will be checked against table db_radius1 Auth-Requests for [EMAIL PROTECTED] will be checked against table db_radius2 .and so on. I already found out that

add realm to user based on NAS-IP

2007-03-31 Thread Alexander Papenburg
Hi all, i wonder if it is possible to add a realm to a username based on the NAS-IP the request come from. For instance: - user abc logs on router 10.0.0.1 - router 10.0.0.1 asks a freeradius proxy for user abc - freeradius-proxy recognize the ip and add @realm to the username and proxy the

Re: add realm to user based on NAS-IP

2007-04-10 Thread Alexander Papenburg
Hi Arran, hi Alexander and hi Freeradius-List, I ran into problems regarding to the Proxy-to-realm thing... :( My Setup: 10.0.0.1 A cisco Router 10.0.1.20 My Terminal 192.168.0.1 Radius (Home Server) 192.168.0.2 Radius (Proxy) At first a successful login with username [EMAIL PROTECTED]:

Re: add realm to user based on NAS-IP

2007-04-11 Thread Alexander Papenburg
Arran Cudbard-Bell schrieb: rlm_realm instances do much the same job as the Proxy-To-Realm reply item, just they also handle splitting the username into it's component parts. Usually you would use one or the other, but not both. Okay I tested both ways: 1st with suffix disabled in authorize

Re: log on device directly in priviledged mode

2007-04-11 Thread Alexander Papenburg
Molteni Davide wrote: Finally I successfully managed to log into the cisco switch (thanks to your help) using freeradius. Now I want that the radius users can directly enter into enable mode of the cisco device. I set this in the users file test Auth-Type := Local, User-Password == test

Re: R: log on device directly in priviledged mode

2007-04-11 Thread Alexander Papenburg
Molteni Davide wrote: -Messaggio originale- Da: [EMAIL PROTECTED] per conto di Alexander Papenburg Inviato: mer 11/04/2007 15.41 A: FreeRadius users mailing list Oggetto: Re: log on device directly in priviledged mode Molteni Davide wrote: Finally I successfully managed

Size Limitations on clients.conf

2007-04-22 Thread Alexander Papenburg
Hi, iam just wondering if there are any size limitations on the clients.conf file. Background is: The current file consist of many /24 net-ranges and is currently 22k big ;) For the past days I recognised some strange activities but unfortunately only saw the following in the log: . Auth:

Multiple Huntgroups for one User?

2007-09-12 Thread Alexander Papenburg
Hi Freeradius-List, is it possible to give/deny access to multiple huntgroups for a single user/group? E.g.: User/group is denied to access hosts 10.0.0.1, 10.0.0.2 and 10.0.0.3 but is allowed to access all the other hosts in 10.0.0.0/24. Something like hostpools would be nice (e.g.:

Multiple Huntgroups for one User? 2nd Try

2007-09-14 Thread Alexander Papenburg
2nd Try, just in case my 1st message was not recognized ;-) Hi Freeradius-List, is it possible to give/deny access to multiple huntgroups for a single user/group? E.g.: User/group is denied to access hosts 10.0.0.1, 10.0.0.2 and 10.0.0.3 but is allowed to access all the other hosts in

Re: Multiple Huntgroups for one User? 2nd Try

2007-09-17 Thread Alexander Papenburg
[EMAIL PROTECTED] schrieb: huntgroups file: pool3 NAS-IP-Address == NAS1IPAddress pool3 NAS-IP-Address == NAS2IPAddress pool3 NAS-IP-Address == NAS3IPAddress DEFAULT Huntgroup-Name == pool3, User-Name == user2, Auth-Type := Reject in users file. Huntgroups *are* what you refer to