client's shortname cast the real IP

2006-02-01 Thread Min Qiu
Hi, I have: client 10.1.2.0/24 { secret = secretkey shortname = 10.1.2.x } The problem is the log has only 10.1.2.x, not the real NAS IP. However, taking the shortname out will generate error when the radiusd runs. What I can do to have the server log the real NAS ip. Of cause, I

RE: FreeRadius - setting up

2006-01-31 Thread Min Qiu
Fedora Core 4 has prebuild rpm freeradius-1.0.4.-1.FC4.1 yum install freeradius will do it. Hope this will help, Min -Original Message- From: [EMAIL PROTECTED] freeradius.org [mailto:freeradius-users-bounces+mqiu=globalinternetworking.co [EMAIL PROTECTED] On Behalf Of Timolthy

RE: Problems System Auth with FreeRadius (/etc/shadow)

2006-01-26 Thread Min Qiu
You may read the doc wrong. The group you should look for is radiusd. When you create user radiusd, the group radiusd should also be created if you use adduser command to do the job. You don't what user radiusd belong to group root. Do chgrp radiusd /etc/shadow. Min -Original

RE: Restricting access to a NAS

2006-01-24 Thread Min Qiu
I'm able to make it work by using huntgroups admin NAS-IP-address =~ ^10\.1\.2\.# thanks a lot to Bjørn User-Name = admin1, User-Name = admin2, ... ... and users admin1 Auth-Type := Local, User-Password == secret, Huntgroup-Name == admin ... I

NAS-IP-address == 10.1.2.0/24 allowed?

2006-01-23 Thread Min Qiu
Hi, Again, newbie question that I failed to find the anwser from FAQ or wiki. I would like to restrict user login by NAS-IP-address or fqdn if possible. Therefore I can restrict user to login a group of devices. user1 Auth-Type := Local, User-Password == sceret, NAS-IP-address

how to set crypted password in 'users' file?

2006-01-19 Thread Min Qiu
Hi all, I'm able to make clear text password work by adding entry in 'users' file: mqiuAuth-Type := Local, User-Password == clear-text However, cut and past the crypted password from /etc/shadow to the entry failed: mqiuAuth-Type := Local, User-Password ==