From owner-freebsd-isp  Thu Aug  3 11:31:56 2000
Delivered-To: freebsd-isp@freebsd.org
Received: from cache.sai.co.za (mail.sai.co.za [196.33.40.1])
	by hub.freebsd.org (Postfix) with ESMTP id C53CF37B695
	for <freebsd-isp@FreeBSD.ORG>; Thu,  3 Aug 2000 11:31:42 -0700 (PDT)
	(envelope-from davew@sai.co.za)
Received: from fdisk (fdisk.pmburg.co.za [196.33.40.17])
	by cache.sai.co.za (8.9.3/8.9.3) with SMTP id UAA03218;
	Thu, 3 Aug 2000 20:31:27 +0200 (SAST)
	(envelope-from davew@sai.co.za)
Message-ID: <001a01bffd7a$9d926e00$112821c4@sai.co.za>
From: "Dave Wilson" <davew@sai.co.za>
To: <cistron-radius@info.cistron.nl>
Cc: <freebsd-isp@FreeBSD.ORG>
Subject: Multiple DEFAULT values ? 
Date: Thu, 3 Aug 2000 20:42:43 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hi Guys, howzit going ?

I'm running Cistron radiusd version 1.6.1 on a FreeBSD 4.0 server.
I 've been trying to get certain groups of users to have email only access,
and other groups to have full internet access.
The hassle is that each time a user logs in he receives the DEFAULT
attributes instead of his group attributes.
This is my "users" file:


staticipuser1  Auth-Type = System
                     Framed-IP-Address = 196.22.87.2,
                     Service-Type = Framed-User,
                     Framed-Protocol = PPP,
                     Framed-Routing = None,
                     Framed-Compression = Van-Jacobson-TCP-IP,
                     Framed-MTU = 1500

staticipuser2  Auth-Type = System
                     Framed-IP-Address = 196.22.87.3,
                     Service-Type = Framed-User,
                     Framed-Protocol = PPP,
                     Framed-Routing = None,
                     Framed-Compression = Van-Jacobson-TCP-IP,
                     Framed-MTU = 1500

DEFAULT    Auth-Type = System, Group = "mailonly"
                     Service-Type = Framed-User,
                     Framed-Protocol = PPP,
                     Framed-IP-Address = 255.255.255.254,
                     Framed-Routing = None,
                     Framed-Compression = Van-Jacobson-TCP-IP,
                     Framed-Filter-Id = "mailonly",
                     Framed-MTU = 1500

DEFAULT2  Auth-Type = System, NAS-Port-Type = Async
                     Service-Type = Framed-User,
                     Framed-Protocol = PPP,
                     Framed-IP-Address = 255.255.255.254,
                     Framed-Routing = None,
                     Framed-Compression = Van-Jacobson-TCP-IP,
                     Framed-MTU = 1500

If staticipuser1 or staticipuser2 dials in they get their static IP and
everything works 100%, when a normal user that doesn't belong to the
"mailonly" UNIX group dials in he gets assigned the Filter from the
"DEFAULT" section, and can't access the internet, when he should be getting
full access from the "DEFAULT2" section.
Basically how do we get multiple DEFAULT sections support.
Thanks ;-)

Regards
Dave Wilson
The S.A. Internet
(033) 3456777
0825496159
http://www.sai.co.za
 "Who is General Failure and why is he reading my hard drive ?"




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message