hmm.. something like: Class := "%{Group}" - correct? Regards, Pizu On Wed, 7 Apr 2021 at 19:44, Pizu <pizpower@gmail.com> wrote:
Hi,
I need to forward the class which will reflect to a group not the actual LDAP-Group.
The firewall is expecting the Radius Accounting-Start attribute.
Example: Acct-Status-Type=Start,Framed-Ip-Address=10.0.0.1,User-Name=user.name ,Acct-Session-Id=0211a4ef,Class=usergroup1,Calling-Station-Id=00-0c-29-44-BE-B8
I hope I explained better now.
Regards,
Pizu
On Wed, 7 Apr 2021 at 19:20, Alan DeKok <aland@deployingradius.com> wrote:
On Apr 7, 2021, at 1:15 PM, Pizu <pizpower@gmail.com> wrote:
What I mean with LDAP-Group is I need to forward the group name that is assigned to the user towards the firewall (accounting) in order for the firewall to open the access that is assigned. RSSO
So read the firewall documentation to see which attribute it needs.
I can guarantee you that it's not LDAP-Group.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html