Re: Using groups to configure access based on particular requesting radius server.

2004-12-27 Thread Alan DeKok
Mike Cisar [EMAIL PROTECTED] wrote: Likewise is != valid here? Such that the following would be a valid representation... DEFAULT Client-IP-Address == ip1.of.pool.a., Group != poola, Auth-Type := Reject Yes. With only two pools I suppose it wouldn't really make much difference,

RE: Using groups to configure access based on particular requesting radius server.

2004-12-26 Thread Mike Cisar
Thanks Alan Denying from a group I can do... but how to deny from a group conditionally on which radius server the request is coming from is what I can't quite figure. DEFAULT Group == poola, Client-IP-Address == ip.of.pool.a., Auth-Type := Reject I was sure it'd be something

Re: Using groups to configure access based on particular requesting radius server.

2004-12-25 Thread Alan DeKok
Mike Cisar [EMAIL PROTECTED] wrote: My problem/question is this... is it possible to set up somehow so that I can create a couple of Unix groups (call them poola and poolb) and then control whether the login is denied partially on the RADIUS server that is asking. I would suggest using