Edwin Isada wrote:
I am running FreeRADIUS version 1.1.3.
Why?
I'm trying to setup LDAP authentication for Windows users accessing our networking devices especially with Cisco switches and routers. Windows authentication is working properly on my FreeRADIUS server, but I'm trying to figure out how to give different users special privilege access without providing them the enable password. I'd like to specify another Security group with providing them a read-only or special privilege mode with their Windows account. Is this possible? I'm new with using FreeRADIUS, please help.
Yes, it's possible. See "doc/rlm_ldap" for going LDAP group checking in the server. You should use a new version of the server, not one that is 2-3 years old. Alan DeKok.