two user authentication groups for one AS

2010-01-09 Thread Eric
Yes you are right but I have some problems in config: I set a vpn server address in client.conf and in users as: DEFAULT Client-IP-Address == 192.168.20.13, Auth-Type := Vpn, Autz-Type := Vpn, in radiusd.conf: ldap ldap-Vpn{ server = "192.168.10.1" .

two user authentication groups for one AS

2010-01-04 Thread Eric
My users differ in ldap attributes and all come from one AS. I want session-timeout of some users to be the value of counter and for others the session-timeout that I define in freeradius for them. How should I distinct them? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/use

Re: two user authentication groups for one AS

2010-01-02 Thread tnt
> My users differ in ldap attributes. I want session-timeout of some users > to > be the value of counter and for others the session-timeout that I define > in > freeradius for them. > How should I distinct them? > > How will you tell them apart? > > Think of how you will get "user 1" to use "l

Re: two user authentication groups for one AS

2010-01-02 Thread Eric
On Sat, Jan 2, 2010 at 1:59 PM, Eric wrote: > My users differ in ldap attributes. I want session-timeout of some users to > be the value of counter and for others the session-timeout that I define in > freeradius for them. > How should I distinct them? > > > Excuse me. > > > The packets from vpn

Re: two user authentication groups for one AS

2010-01-02 Thread Eric
My users differ in ldap attributes. I want session-timeout of some users to be the value of counter and for others the session-timeout that I define in freeradius for them. How should I distinct them? > Excuse me. > The packets from vpn server to ldap-1 are the same as ldap-2. OK... > I want

Re: two user authentication groups for one AS

2009-12-30 Thread Alan DeKok
Eric wrote: > Excuse me. > The packets from vpn server to ldap-1 are the same as ldap-2. OK... > I want > only in freeradius.org have ldap ldap-1 and ldap-2 for theses users. How will you tell them apart? Think of how you will get "user 1" to use "ldap-1", and "user 2" to use "ldap-2".

Re: two user authentication groups for one AS

2009-12-30 Thread Eric
Excuse me. The packets from vpn server to ldap-1 are the same as ldap-2. I want only in freeradius.org have ldap ldap-1 and ldap-2 for theses users. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: two user authentication groups for one AS

2009-12-30 Thread Alan DeKok
Eric wrote: > access-attr is differ for two group users. Perhaps you should try reading my message again. If you don't understand it, ask questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: two user authentication groups for one AS

2009-12-30 Thread Eric
access-attr is differ for two group users. > Hi > There is one VPN server that I want to authenticate some of its users > with ldap-1 > and others with ldap-2. how should I differ them? What is different about the packets for users in ldap-1, and users in ldap-2? > I defined: > DEFAULT Client-

Re: two user authentication groups for one AS

2009-12-30 Thread Alan DeKok
Eric wrote: > Hi > There is one VPN server that I want to authenticate some of its users > with ldap-1 > and others with ldap-2. how should I differ them? What is different about the packets for users in ldap-1, and users in ldap-2? > I defined: > DEFAULT Client-IP-Address == 192.168.200.21, Au

two user authentication groups for one AS

2009-12-30 Thread Eric
Hi There is one VPN server that I want to authenticate some of its users with ldap-1 and others with ldap-2. how should I differ them? I defined: DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-1, Autz-Type := Vpn DEFAULT Client-IP-Address == 192.168.200.21, Auth-Type := ldap-2, Autz