[RADIATOR] User Auth from listed Nas-Identifier

Hugh Irvine hugh at open.com.au
Tue Apr 14 02:51:44 CDT 2009


Hello Indrajaya -

Yes this is very easy to do with additional check items in the user  
record.

The details depend on what you are using to store the user records,  
but a typical AuthBy FILE entry would look like this:


# users file

someuser	Password = somepassword, NAS-Identifier = whatever
	......

......

You will need to check a trace 4 debug to verify exactly what is  
contained in the NAS-Identifier attribute in the RADIUS access requests.

You can also check one of several NAS-Identifier's like this:


# users file

someuser	Password = somepassword, NAS-Identifier = /whatever|something| 
anotherthing/
	......

......

hope that helps

regards

Hugh


On 14 Apr 2009, at 14:55, Indrajaya Pitra Perdana wrote:

> Dear Hugh,
>
> Is it possible that  1 typical user can only dial through listed Nas- 
> Identifier (several Nas-Identifier), if it is possible how exactly  
> to do that, thx
>
> -- 
> Regards,
>
> Indrajaya Pitra Perdana



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.




More information about the radiator mailing list