<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
Alan DeKok wrote:
<blockquote cite="mid:4A2F6D39.7010307@deployingradius.com" type="cite">
<pre wrap="">Jeff Davis wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Sorry - I'm a n00b to this project.
Trying to get OpenLDAP-based authentication working (well the auth DOES
work) but cannot seem to get authorization working.
Googling has so far failed me. Perhaps someone on this list can clue me
in...
</pre>
</blockquote>
<pre wrap=""><!---->
Have you run the server in debug mode as suggested in the FAQ, README,
"man" page, etc..?
</pre>
</blockquote>
<br>
Yes As far as the radius server is concerned everything is find. I
would agree that the problem is likely on the switch(es). Just not
sure what's missing/extra that's hosing it up.<br>
<br>
Here's the relevent stuff from the switch.<br>
<br>
<tt>aaa new-model<br>
aaa authentication password-prompt PASS:<br>
aaa authentication username-prompt USER:<br>
aaa authentication login default group radius local<br>
aaa authentication login localauth local<br>
aaa authentication dot1x default group radius<br>
aaa accounting delay-start<br>
aaa accounting exec default start-stop group radius<br>
aaa accounting network default start-stop group radius<br>
</tt><br>
<snip><br>
<br>
<tt>radius-server host 10.100.0.15 auth-port 1812 acct-port 1813<br>
radius-server retransmit 3<br>
radius-server timeout 10<br>
radius-server key <myk3y></tt><br>
<br>
<blockquote cite="mid:4A2F6D39.7010307@deployingradius.com" type="cite">
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">users file has the following:
DEFAULT Service-Type == NAS-Prompt-User
Service-Type := NAS-Prompt-User,
Cisco-AVPair += <a class="moz-txt-link-rfc2396E" href="shell:priv-lvl=15">"shell:priv-lvl=15"</a>
</pre>
</blockquote>
<pre wrap=""><!---->
If those attributes are being sent back to the NAS, then fix the NAS
so that it follows the instructions sent by the RADIUS server.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Jefferson K Davis
Technology & Information Systems Manager
Standard School District
1200 North Chester Ave
Bakersfield, CA 93308
USA
661.392.2110 ext 120</pre>
</body>
</html>