Alan DeKok wrote:


You would be better of having the customers manage their own RADIUS servers, and having you just proxy to those servers.

 If the customers don't want to manage their own servers, you can
still have a server locally, per-customer.  That way, you can give
each customer limited access to the SQL database, and be guaranteed
that they can't affect other customers.



Ok so the way this would work is to have an instance of the radiusd program running for every customer. Just point it at the right configuration files for the customer and bind it to a different port for each customer. Then give the customer access to the users table in the correct SQL database for their radius server.

Put a proxying server in front of these other servers, and proxy
based on realms.


Then stick a proxying server on the normal radius port and proxy based on realms. Is this how it would work?

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to