Re: The "right" way to limit a user to one EAP Type on FR2.1.7 addision question

[ziyen]

Hi,

> User01 is only EAP-TLS
> User02 is only EAP-TTLS
> Uesr03 is only EAP-PEAP
> Uesr04 is Any EAP-Type

Just an educated guess ... in users file,

User01   EAP-Type != EAP-TLS, Auth-Type := Reject

User02   EAP-Type != EAP-TTLS, Auth-Type := Reject

...

but, that is not a backend mysql  :( 
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[tnt-5]

> Hi,
>
>> User01 is only EAP-TLS
>> User02 is only EAP-TTLS
>> Uesr03 is only EAP-PEAP
>> Uesr04 is Any EAP-Type
>
> Just an educated guess ... in users file,
>
> User01   EAP-Type != EAP-TLS, Auth-Type := Reject
>
> User02   EAP-Type != EAP-TTLS, Auth-Type := Reject
>
> ...
>
> but, that is not a backend mysql  :(

So? It's not hard to translate user file entries into sql entries:

what's on yhe first (check) line goes into radcheck table

what's on reply lines goes into radreply

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html