Dear luis,

Here is a small logical graph of my configuration, my NAS is my WS controller, and my traffic shaper can only receive accounting date forwarded to it from my radius.

The radius did the authorization according to LDAP-Group received from the LDAP

We want the traffic shaper to apply policy on users according to the ldap-group of each user. The ldap-group is included as a replyitem in the authorization data.

The traffic shaper can only listen to the accounting data of the radius, cannot act as NAS, and don't support a direct communication with the LDAP.

We are searching for a way to append ldap-group to the accounting data before it is forwarded to the traffic shaper.

On Fri, Nov 26, 2010 at 3:15 PM, Toledo, Luis Carlos <lscrlstld@gmail.com> wrote:

Noop...

you have a conceptual design problem of in your project...

Usually the NAS receives the network parameters in auth reply packet, and
allow or disallow access, bandwidth, session time, etc.

Acct packet only store the usage data.

Your appliance must acct as NAS.

> I need to forward the accounting data including the LDAP-Group to a
> traffic shaper appliance installed before our internet gateway.
>
>
> From the accounting data, This appliance will allow a quota internet
> usage for each user according to its LDAP-Group category (student,

> faculty, admin, par timer, assistant,.....)d
>
> Nabawia

>
>
>> I want a help how to insert this in the accounting packet.
>> The problem is not how to configure the LDAP lookup, but how to enables
>> field in the accounting request.
>what is the purpose of that? What you want or need?

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html