Re: (PM) How to preventing some users to use modems in PM3 with Radius

NOT a LE employee (livingston@iav.com)
Fri, 23 Jan 1998 13:20:04 -1000 (HST)

On Fri, 23 Jan 1998, Garry Shtern wrote:

> At 06:28 PM 1/23/98 +0100, Christer Olsson wrote:
> >
> >I need to prevent some users for using modems instead for ISDN. How to do
> >it in the RADIUS users-file?
> >
> >I've tried to use check-items like NAS-Port-Type = Async with some
> >different reply-items, but without any success..
>
> You have to add NAS-Port-Type = Async at the end of the first line as such:
>
> blah Authentication-Type = Unix-PW NAS-Port-Type = Async
> Framed-....

you forgot the comma between check items and the first and last lines of a
RADIUS user entry do NOT have commas at the end.

denyusername NAS-Port-Type = Async, Auth-Type = Reject

username NAS-Port-Type = ISDN, Auth-Type = System
.,
.,
.

Hmm, actually you could put the users into a group which would simplify it
much. This entry must be before any other DEFAULTs you have.

http://www.livingston.com/Tech/Docs/Release/radius201.shtml <-- check that
out for new additions like Auth-Type = Reject

Note: Keep your dictionary current and update the terms in your user file
when possible... the old dictionary items may not always be there....

--
Aloha from Paradise,

Sherwood

- To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message.