On 17/07/2020 10:49, MD. NUR KHAKIM A`ZIIZUDIN wrote:
i'm new to freeradius, recently we are implementing freeradius as AAA server to authenticate user throug aruba wifi controller our setup is openldap + freeradius + aruba
OK
we use AD + NPS server + aruba before, and have implemented group policy on our network configuration that read filter-id attribute so how we do the same thing on freeradius, i've been searching on google and didn't find anything.
if anyone know how to add group policy for openldap + freeradius + aruba setup please let me know how to do it.
"Group policy" is Microsoft wording. You need to work out what that actually means in terms of what the RADIUS server is doing. i.e. what attributes do you need to send back when a particular request comes in? Where is the data in those attributes stored? Then write a configuration/policies that look up the data based on the incoming request and sends the correct attributes back in the reply. The NAS documentation (sounds like Aruba in your case) should give you an indication of what to send back. The easiest thing if you don't know already is probably to look at the replies your old system is sending, and then replicate that in FreeRADIUS. -- Matthew