<html><body>
<p><font size="2" face="sans-serif">Hi,</font><br>
<font size="2" face="sans-serif">I thought the whole meaning of binding a freeRadius to an Active Directory is that I have from now on just to configure Users in the AD.</font><br>
<font size="2" face="sans-serif">So every device I want to authenticate on asks the FR which then asks the AD. So the AD will answer if the User is valid and which Service-Type he has.</font><br>
<font size="2" face="sans-serif">On my AD Server I installed the Role NPS, configured a RADIUS-Client and some Network Policies. Maybe I am on the right way, maybe not... :-(</font><br>
<font size="2" face="sans-serif">The AD succesfully tells the FR if the user is valid, just that Service-Type is missing.</font><br>
<br>
<font size="2" face="sans-serif">Martin</font><br>
<br>
<img width="16" height="16" src="cid:1__=4EBBF001DFB2C2A48f9e8a93df@BeldenCDT.com" border="0" alt="Inactive hide details for alan buxey ---08.10.2012 16:38:51---Hi, > Now I am having the problem that the devices I want to a"><font size="2" color="#424282" face="sans-serif">alan buxey ---08.10.2012 16:38:51---Hi, > Now I am having the problem that the devices I want to authenticate are</font><br>
<br>
<tt><font size="2">>Hi,<br>
<br>
>> Now I am having the problem that the devices I want to authenticate are<br>
>> requesting the Service-Type(Attribute 6). Do you have any idea how to set<br>
>> the Service-Type in Active Directory for each user? Is that even possible<br>
>> or do I have to configure the users file for each user and his<br>
>> corresponding Service-Type?<br>
<br>
>service-type will have come from the NAS - if you are running FR with standard<br>
>dictionaries then you would see what type of service-type is coming in eg login<br>
>or authenticate-only. if you want to use policies then you can define those in<br>
>eg users file, get them via LDAP (authorize), or in SQL etc.<br>
<br>
>alan</font></tt><br>
<p>DISCLAIMER:
Privileged and/or Confidential information may be contained in this
message. If you are not the addressee of this message, you may not
copy, use or deliver this message to anyone. In such event, you
should destroy the message and kindly notify the sender by reply
e-mail. It is understood that opinions or conclusions that do not
relate to the official business of the company are neither given
nor endorsed by the company.
Thank You.
</p>
</body></html>