Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-09 Thread Graeme Hinchliffe
Hiya, Use Client-IP rather than NAS-IP as NAS-IP can be spoofed. Graeme On Wed, 2005-06-08 at 15:30 -0700, N White wrote: Graeme Hinchliffe wrote: Hiya perhaps you could do it using huntgroups. Put the static attributes for the user in the radreply table, then assign

Re: Authenticate/Attributes based on NAS-IP-Address - SOLVED

2005-06-09 Thread N White
Ok, so here's what I did to solve this problem. I'm posting this just for anyone out there searching the Archives that needs something like my situation. I did a lot of reading, and a lot of re-reading, and finally the lightbulb over my head clicked on! I read Mike's previous post several

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread Graeme Hinchliffe
Hiya perhaps you could do it using huntgroups. Put the static attributes for the user in the radreply table, then assign each nas to a huntgroup, so say NAS-dynamic Then in radgroupreply you put the attributes for for dynamic IP assignment on the NAS-dynamic, and ensure

RE: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread Jeff Green
, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of N White Sent: 07 June 2005 22:29 To: FreeRadius users mailing list Subject: Authenticate/Attributes based on NAS-IP-Address Using MySQL as a backend, is there any way to configure Authentication and Attribute

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread Mike Lampson
, _Mike -Original Message- Message: 6 Date: Tue, 07 Jun 2005 19:20:28 -0700 From: N White [EMAIL PROTECTED] Subject: Re: Authenticate/Attributes based on NAS-IP-Address To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread N White
? Regards, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of N White Sent: 07 June 2005 22:29 To: FreeRadius users mailing list Subject: Authenticate/Attributes based on NAS-IP-Address Using MySQL as a backend, is there any way to configure

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread N White
] Subject: Re: Authenticate/Attributes based on NAS-IP-Address To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1; format=flowed Actually I already have two running FreeRADIUS servers with SQL

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread N White
: Tue, 07 Jun 2005 19:20:28 -0700 From: N White [EMAIL PROTECTED] Subject: Re: Authenticate/Attributes based on NAS-IP-Address To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread Zoltan A. Ori
On Wednesday 08 June 2005 15:54, N White wrote: That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this. -Nick Mike Lampson wrote: Nick,

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread N White
Zoltan A. Ori wrote: On Wednesday 08 June 2005 15:54, N White wrote: That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this. -Nick Mike Lampson wrote: Nick,

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread N White
Graeme Hinchliffe wrote: Hiya perhaps you could do it using huntgroups. Put the static attributes for the user in the radreply table, then assign each nas to a huntgroup, so say NAS-dynamic Then in radgroupreply you put the attributes for for dynamic IP assignment on

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-08 Thread Mike Lampson
That link doesn't give me anything. Page Not Found. I've done a lot of searching through the archives though and haven't really found anything like this. Did you add the tml back into the URL? http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16842.h tml _Mike - List

Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread N White
Using MySQL as a backend, is there any way to configure Authentication and Attribute (replies), based on the NAS-IP-Address sent to the FreeRADIUS server? Allow requests from NAS1 to authenticate and have certain attributes for users in that group and then allow requests from NAS2 to

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread N White
Alan DeKok wrote: N White [EMAIL PROTECTED] wrote: Using MySQL as a backend, is there any way to configure Authentication and Attribute (replies), based on the NAS-IP-Address sent to the FreeRADIUS server? Yes. Use it as a check item, like anything else. Alan DeKok. - List

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread Alan DeKok
N White [EMAIL PROTECTED] wrote: Ok, so is it possible for them to be a part of two groups? The reason I ask is that if a customer logs in through NAS1, I want them to be assigned a dynamic IP, if they are logged in from NAS2, I want them to be assigned a static IP. Is this possible?

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread Alan DeKok
N White [EMAIL PROTECTED] wrote: Yeah, but I want to use MySQL, not the users file. I don't use MySQL, sorry. If you want someone to give you the exact answer you're looking for, I suggest you hire a contracter. Alan Dekok. - List info/subscribe/unsubscribe? See

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread N White
Alan DeKok wrote: N White [EMAIL PROTECTED] wrote: Yeah, but I want to use MySQL, not the users file. I don't use MySQL, sorry. If you want someone to give you the exact answer you're looking for, I suggest you hire a contracter. Alan Dekok. - List info/subscribe/unsubscribe?

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread Dustin Doris
On Tue, 7 Jun 2005, N White wrote: Well, thanks for the input. With MySQL, 1500 users is easier to maintain. Perhaps I should just run a second FreeRADIUS server for the second NAS. It means more equipment, but whatever it takes. -Nick You don't need to do that, you can do it with SQL in

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-07 Thread N White
Dustin Doris wrote: On Tue, 7 Jun 2005, N White wrote: Well, thanks for the input. With MySQL, 1500 users is easier to maintain. Perhaps I should just run a second FreeRADIUS server for the second NAS. It means more equipment, but whatever it takes. -Nick You don't need to do that,