Re: PEAP authentication + LDAP attribute recovery



O/H Manuel Sánchez Cuenca έγραψε:
Hi all,

It is possible to configure freeradius to authenticate users using PEAP
and then, for authenticated users, return some RADIUS attributes
recovered from a LDAP server, such as Session-Timeout or
Framed-IP-Address?. And in that case, how can I configure it?

Thanks in adavance

Yes. PEAP has specific restrictions on the password though (it should be clear text or NT-Password). rlm_ldap (in the authorize section) will retrieve any radius attributes present in the user entries (as well as in some other profiles). Check the doc folder for the rlm_ldap documentation and for the radius ldap schema.

--
Kostas Kalevras - Network Operations Center
National Technical University of Athens
http://kkalev.wordpress.com





This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.