Users: | L- |
Hints: | -R |
Huntgroups: | LR |
Additivity: | Append |
Proxy propagated: | No |
The Huntgroup-Name
can be used either in LHS of the
`users' file record or in RHS of the `huntgroups'
file record.
When encountered in a LHS of a particular `users' profile, this attribute indicates the huntgroup name to be matched. Radius looks up the corresponding record in the `huntgroups' file. If such record is found, each A/V pair from its reply-list is compared against the corresponding pair from the request being processed. The request matches only if it contains all the attributes from the specified huntgroup, and their values satisfy the conditions listed in the huntgroup pairs.
For example, suppose that the authentication request contained the following attributes:
User-Name = "john", Password = "guess", NAS-IP-Address = 10.11.11.1, NAS-Port-Id = 24
Let us further suppose that the `users' file contains the following entry:
john Huntgroup-Name = "users_group", Auth-Type = System Service-Type = Login
and, finally, `huntgroups' contains the following entry:
users_group NAS-IP-Address = 10.11.11.1 NAS-Port-Id < 32
Then the authentication request would succeed since it contains
NAS-Port-Id
attribute and its value is less than 32.
See section Huntgroups -- `raddb/huntgroups'.
Go to the first, previous, next, last section, table of contents.