<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Also getting the following on the switch log:<br>
<br>
<blockquote type="cite"><tt>19:23:13: tty2 AAA/AUTHOR/EXEC
(4066001896): send AV service=shell<br>
19:23:13: tty2 AAA/AUTHOR/EXEC (4066001896): send AV cmd*<br>
19:23:13: tty2 AAA/AUTHOR/EXEC (4066001896): found list "default"<br>
19:23:13: tty2 AAA/AUTHOR/EXEC (4066001896): Method=radius (radius)<br>
19:23:13: RADIUS: no appropriate authorization type for user.</tt><br>
</blockquote>
I am all but certain this is a self-inflicted wound. At least those
are easier to fix once their nature is known.<br>
<br>
I currently have no attributes in my openldap tree populated... will
eventually add a group filter when I get this authotization piece
working. Could the problem be ldap-related or switch or ??? I'm
stumped. I can't imagine no one has dealt with this before.<br>
<br>
Alan DeKok wrote:
<blockquote cite="mid:4A2F6D39.7010307@deployingradius.com" type="cite">
<pre wrap="">Jeff Davis wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Sorry - I'm a n00b to this project.
Trying to get OpenLDAP-based authentication working (well the auth DOES
work) but cannot seem to get authorization working.
Googling has so far failed me. Perhaps someone on this list can clue me
in...
</pre>
</blockquote>
<pre wrap=""><!---->
Have you run the server in debug mode as suggested in the FAQ, README,
"man" page, etc..?
</pre>
<blockquote type="cite">
<pre wrap="">users file has the following:
DEFAULT Service-Type == NAS-Prompt-User
Service-Type := NAS-Prompt-User,
Cisco-AVPair += <a class="moz-txt-link-rfc2396E" href="shell:priv-lvl=15">"shell:priv-lvl=15"</a>
</pre>
</blockquote>
<pre wrap=""><!---->
If those attributes are being sent back to the NAS, then fix the NAS
so that it follows the instructions sent by the RADIUS server.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Jefferson K Davis
Technology & Information Systems Manager
Standard School District
1200 North Chester Ave
Bakersfield, CA 93308
USA
661.392.2110 ext 120</pre>
</body>
</html>