Yes, I´d like to differentiate my Async and ISDN users, as you said, but I
still need to differentiate my to NAS. How? Well... when a user became from
NAS1 he autenticate as user when he come from NAS2 he autenticate as
[EMAIL PROTECTED]
I really need to do it by this way.
Any help?
Here is my debug log of radiusd:
Module: Instantiated detail (detail)
Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on
1814/udp.
Ready to process requests.
rad_recv: Access-Request packet from host 200.198.91.14:1812, id=76,
length=86
User-Name = "789"
User-Password = "nS\242\206"Gl\31\3578\364\263\300\260\373"
NAS-IP-Address = 200.198.91.14
NAS-Port = 212
NAS-Port-Type = ISDN
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = "03137002933"
modcall: entering group authorize
No huntgroup access: [789] (from client 200.198.91.14 port 212 cli
03137002933)
modcall[authorize]: module "preprocess" returns reject
modcall: group authorize returns reject
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
and here is my conf files:
hints:
DEFAULT Suffix = "@teste.com", Strip-User-Name = Yes
Hint = "AVATI",
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Compression = Van-Jacobson-TCP-IP
huntgroups:
intelig NAS-IP-Address == xxx.xxx.xxx.xxx
intelig NAS-IP-Address == xxx.xxx.xxx.xxx
Group = teste
email NAS-IP-Address == xxx.xxx.xxx.xxx
Group = email
dialNAS-IP-Address == xxx.xxx.xxx.xxx
Group = dial
isdnNAS-IP-Address == xxx.xxx.xxx.xxx
Group = isdn,
Group = dial
isdn2 NAS-IP-Address == xxx.xxx.xxx.xxx
Group = isdn2,
Group = dial
isdial NAS-IP-Address == xxx.xxx.xxx.xxx
Group = isdn,
Group = dial
realms:
teste.com LOCAL realm
- Original Message -
From: "Evren Yurtesen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 28, 2002 9:45 AM
Subject: Re: Example of realms/hints/huntgroups files
so you want to differentiate Async and ISDN users? Like you dont want
Async users to connect to ISDN lines?
if you are using cisco it is sending the port type in authentication
requests of either Async or ISDN you can check this only (I guess) without
needing to use realms etc.
Evren
On Thu, 28 Nov 2002, Leandro Machado wrote:
> I´m trying to differentiate my RAS with REALM any my PPP and ISDN users
with
> realms/hints/huntgroups, but it isnt work.
>
> Can anyone send me this files as example?
>
> regards
>
> lmc
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
