Hello all I found some hint on how the VPN gateway expects the group information from the RADIUS server to be presented: --- QUOTE --- To use RADIUS groups, you must define a return attribute on the RADIUS Server, in the RADIUS user profile. This RADIUS attribute is returned to the VPN gateway that contains the group name to which the user belongs. By default the Class attribute is used (IETF RADIUS attribute number 25), though other RADIUS attributes can be used. [...] Modify the RADIUS users to include a “class” RADIUS attribute on the users' Return list that corresponds to the Firewall user group they will be using for their access. [...] --- UNQUOTE --- So, the question is: How do I make freeradius return the users' group as a "class" attribute in the authentication reply? Thanks for any hint. /markus Markus Wernig wrote:
What I'm looking for (and can't find in neither man nor wiki nor google) is how to send back the group an authenticated user is in together with the authentication result.