On Mon, 18 Apr 2005, guest01 wrote:
Hi
Thxs for the fast reply!!
Ok, user steve (the one with the Auth-Type := Local) exists only for testing purposes. With user-data in die local users file, the nas-identifier works!!!!
So, I don't know why radius ignores my ldap data ...
Thxs for you help!
best regards peda
user testuser (defined in the ldap) with userpassword
------------------------------------------------------------------------ dn:uid=testuser,ou=users,dc=myserver,dc=local
radiusProfileDn: uid=testuser,ou=radius,dc=myserver,dc=local isVPNUser: TRUE uid: testuser objectClass: myserverUser userPassword: 123456 ------------------------------------------------------------------------
dn:uid=testuser,ou=radius,dc=myserver,dc=local uid: testuser cn: testuser objectClass: radiusprofile account radiusNASIdentifier: vpn
So the user should be allowed to authenticate because of the different radiusNASIdentifier (NAS-Identifier chilli is the right one!)
I would suggest using the checkval module to achieve that.
-- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html