Dustin Doris wrote:

Hi,

how can i manage to accept two kind of users:
the first:
   premium, may login from serverA and serverB
the second:
   normal, may only login from serverB

I thought to manage this by huntgroup-file:
################################
huntgroup-file:

premium    NAS-IP-Address == serverA
premium    NAS-IP-Address == serverB
*
*normal       NAS-IP-Address == serverB
################################

But  with this configuration only the premium user
can login from serverB, the normal users are denied!!




Good start, but what's in your users file? There is more to it, the huntgroup file only defines what is a huntgroup. Something else (such as the users file) will define what to do if someone is in that huntgroup.


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


The users file looks like that:
user1 Auth-Type := PAP, Crypt-Password == "XXXXXXX", Huntgroup-Name == premium
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Netmask = 255.255.255.0,
Framed-IP-Address = 10.10.11.11


user2 Auth-Type := PAP, Crypt-Password == "YYYYYYY", Huntgroup-Name == normal
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Netmask = 255.255.255.0,
Framed-IP-Address = 10.10.10.11


and user1 is allowed to login, but user2 is denied, also both login from serverB.
I am using Freeradius 1.0.1.


--
--------------------------------------------------------------
Dipl. Inf. Florian Prester
Network Administration
Regionales RechenZentrum Erlangen
Universitaet Erlangen-Nuernberg
Germany

Tel.: +499131 8527813


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to