On Tue, Oct 12, 2004 at 02:11:02AM -0700, Alex wrote: > If Auth-Type is Accept, no EAP negociation occurs. What I want is TTLS established > and user credentials checked and also NAS-Identifier value checked. Thai is, block > some TTLS users from connecting from behind other NAS than its own. > I get users accepted if TTLS user has only 'User-Password' and '==' in the > radcheck. As soon as I add 'NAS-Identifier, '==', 'my_nas', it says Auth-Type not > found.
Ah, ok. I use huntgroups for a semiliar thing (restriction certain accounts to certain NASes). Perhaps this is something that might help you, too? Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html