Sound like a configuration (a job for :> ) "realms". Each location would be a different realm, so the seemingly overlapping username "manger" would in fact be a unique "manager@realm-X".
Thoughts? -craig On Wednesday, March 16, 2011, Richard Thornton <rtho...@yahoo.com> wrote: > I am just learning about freeradius now, and would like to see if I can use > it to manage access and logging for users at a few hundred locations. Each > remote office has between 1 and 50 users, and at first glance freeradius will > do the job, but I just noticed a problem with overlapping usernames. I am > not sure if I need to use virtual servers, or if there is a better / easier > way. > > The problem is that each location may have a user with the same login name as > a different location. For a simple example, each site could have a login of > "manager", but the manager username at each site would probably pair up with > a different password. > > Without using virtual servers, is there a way to link the username "manager" > to the NAS name or IP of the location? I'm picturing > something like the radcheck table containing an additional field for NAS > such that freeradius would key off the combined of NAS address and username > fields, rather than just the username field. > > I am not opposed to using virtual servers if that is a better idea, but I'm > worried about the overhead of several hundred of them... Any ideas or > pointers to docs would be appreciated. > > -Richard > > > > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
