Douglas Caro wrote:
I'm trying to modify a working configuration to add one more authentication service in FreeRadius.
What's an "authentication service" ?
I already have one configuration to authenticate users in ldap to use wireless network. See the radiusd.conf:
Please don't post config files. They're rarely necessary.
and, the users file:
users ======================================== DEFAULT Auth-Type := MS-CHAP
Don't force Auth-Type. Really. This is documented in all sorts of places.
This is enough to provide access to users in wireless network.
No, it's not. Forcing Auth-Type like you did will *prevent* wireless access.
I need to add a Radius Auth in Ldap to Switches devices with Group Check.
No... you want to *retrieve* passwords from LDAP. LDAP is a database. You don't do "RADIUS Auth in LDAP".
and many instances like groupmembership_filter, groupname_attribute, filter, base_filter, access_attr, groupmembership_attribute, but nothing do the group check in ldap!
Read doc/rlm_ldap. This is on the Wiki, too. Alan DeKok.