Hey,

On Jan 29, 2008 9:45 AM, <[EMAIL PROTECTED]> wrote:

> Hi,
>
> I have a question.
> When the user logs using own username and password into Radius server (ie,
> using 192.168.160.5), it is OK. When someone change IP address statically
> into logged IP (to 192.168.160.5), he can use the logged account. I mean
> he can use another one's account.


This is something that the NAS controls. FreeRADIUS only receives
authentication
requests upon which it can Accept or Reject the user. You might also want
to look at the Simultaneous-Use attribute.


> How can I block another PC? And I don't
> want the user logs often in one day.


You can set a check attribute for the Calling-Station-Id MAC Address and so
the user will be granted access only if he logs in from a specific machine.


> User must logs once in a day. That's
> why I don't want to put Idle-Timeout attribute.
>
>
Explain better please.


Regards,
Liran Tal.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to