Ok, I don’t be clear.

The solution that I your given does not use the replyItem Tunnel-Medium-Type, Tunnel-Private-Group-Id, Tunnel-Type.

My Ldap base contains attributes SSID for each users. Because my NAS sends its vendor-specific containing the SSID where wants to connect the users. And at each request for authentification, the module authorize (radiusd.conf) call Ldap (with the filter) to compare the `uid' and `SSID'. If the SSID sent by the NAS corresponds at the SSID stored in Ldap: freeradius sends ‘accept’, if not it sends a ‘reject’.

But you want that it is the switch Cisco which redirects the user in such or such SSID according to SSID'S corresponding to the attributes Tunnel-Medium-Type, Tunnel-Private-Group-Id, Tunnel-Type.?

I am sorry, but I had not understood this.

Wat does it solution wish you?

Ludovic Cailleau

Antonio Matera <antonio.matera@create-net.it> a écrit :

Hi,
thanks a lot for your answer.
Your solution works fine but I don't understand some things:

1 - If I insert the Cisco-AVPair in the filter and I haven't this
attribute in my ldap user, I can't authenticate it. Is it possible to
check the ssid only if it is in the list of the ldap user attributes?

2 - With this solution the following row in the ldap.attrmap is not
necessary:

checkItem Cisco-AVPair radiusCiscoAVPair

whitout it the filter authentication works.
It is not possible to use the ldap.attrmap file to inser a check item?

In this file I have inserted 3 replyItem:

replyItem Tunnel-Medium-Type radiusTunnelMediumType
replyItem Tunnel-Private-Group-Id radiusTunnelPrivateGroupId
replyItem Tunnel-Type radiusTunnelType

if I insert these three attribute in my ldap user they work without
other configuration. Why the checkItem doesn't work?

3 - the last question is a little different: if I insert in the user
file this row:

DEFAULT Auth-Type := LDAP

the authentication doesn't work. It is normal or I have some mistakes in
my configuration?

Thanks a lot
Bye Antonio

Ludovic Cailleau

Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.