i use samba to integrate my AD with Freeradius and i think it use ntlm-auth.but i don't know that is it necessary to use ldap module or not for sending attribute to nas for different group or not ? On Tue, Feb 22, 2022 at 1:05 PM Москалев Артем Сергеевич <MoskalevAS@energomera.ru> wrote:
-----Original Message----- From: Freeradius-Users [mailto:freeradius-users- bounces+moskalevas=energomera.ru@lists.freeradius.org] On Behalf Of ReZa Esfahani Sent: Tuesday, February 22, 2022 12:24 PM To: Free Radius Mailing list <freeradius-users@lists.freeradius.org> Subject: AD group and Reply Attribute
Hello, I have Microsoft Active Directory as a users database in my company. i have 10 Different Group in my AD and i want to send specific attributes for each group to NAS, I also integrate my AD with freeradius, but i don't know how to send these attribute to nas and i dont know where i made mistake?
users file ....................................... DEFAULT Ldap-Group == "CN=student,OU=IT,OU=FDM,DC=test,DC=com", Service-Type = Framed-User, Framed-Protocol = PPP, Tunnel-Medium-Type = 802 (includes all 802 media plus Ethernet "canonical format"), Tunnel-Private-Group-ID = 15 Tunnel-Type = Virtual Lans (VLAN) ........................................................... mods-enabled > ldap module ..........................................................
ldap {
server = 'active.test.com' identity = 'CN=std,OU=IT,OU=FDM,DC=test,DC=com' password = 1 base_dn = 'dc=test,dc=com' } ........................................................................................... site-enabled > default ......................................................... in authorize section uncomment ldap - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, ldap connect success? Need debug output - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html