On 21.05.2014 21:41, Ajinkya Fotedar wrote:
(0) ldap : reply:F5-LTM-User-Info-1 := 'F5-LTM-User-Info-1+=\"R&D\"' (0) ldap : reply:F5-LTM-User-Info-1 := 'F5-LTM-User-Partition+=\"RnD\"' (0) ldap : reply:F5-LTM-User-Info-1 := 'F5-LTM-User-Role+=\"100\"' (0) ldap : reply:F5-LTM-User-Info-1 := 'F5-LTM-User-Shell+=\"tmsh\"'
what's actually wrong in your config is this entry in the ldap update map : reply:F5-LTM-User-Info-1 := 'radiusReplyItem' if you're using 3.0.x you should actually use valuepair_attribute = "radiusReplyItem" in your ldap configuration and update your ldap entries to add the list : # R&D, Groups, F5, Configuration, NIS, vt dn: cn=R&D,ou=Groups,ou=F5,ou=Configuration,ou=NIS,o=vt cn: R&D description: Entiries for the R&D group user accounts member: uid=dawson,ou=People,ou=NIS,o=vt radiusReplyItem: reply:F5-LTM-User-Info-1+="R&D" radiusReplyItem: reply:F5-LTM-User-Partition+="RnD" radiusReplyItem: reply:F5-LTM-User-Role+=100 radiusReplyItem: reply:F5-LTM-User-Shell+="tmsh" you could set in the update {} section reply: += 'radiusReplyItem' and this would also work, but this is provided as a backward compatibility. i'll encourage you to rather use the new valuepair_attribute for reference : https://github.com/FreeRADIUS/freeradius-server/blob/master/raddb/mods-avail... Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org