RE: NAS in sql and returning specific VSAs

8 Nov 2011

      For the solution, I did that :

        authorize {
+            update request {
+                FreeRADIUS-Client-NAS-Type = "%{sql:SELECT type FROM nas
WHERE nasname='%{Packet-Src-IP-Address}'}"
+            }
             group {
                LDAP_COMPANY
             }		

And in the section post-auth, I did :

+               if ("%{FreeRADIUS-Client-NAS-Type}" == "cisco") {
+                       update reply {
+                                Service-Type = NAS-Prompt-User
+                                cisco-avpair = "shell:priv-lvl=15"
+                       }
+                 }
+               elsif ("%{FreeRADIUS-Client-NAS-Type}" == "bigip-ltm") {
+                        update reply {
+                               F5-LTM-User-Role = Administrator
+                               F5-LTM-User-Info-1 = myuserinfo
+                               F5-LTM-User-Partition = Common
+                               F5-LTM-User-Shell = bpsh
+                       }
+               }

And this works ... Thanks for your help !!!

Fabien VINCENT
Ingénieur Réseaux & Sécurité / ASSR Produits
Niveau 3 - Infrastructure & Produits
fabien.vincent@coreye.fr

-----Message d'origine-----
De : freeradius-users-bounces+fabien.vincent=coreye.fr@lists.freeradius.org
[mailto:freeradius-users-bounces+fabien.vincent=coreye.fr@lists.freeradius.o
rg] De la part de Alan Buxey
Envoyé : mardi 8 novembre 2011 18:39
À : FreeRadius users mailing list
Objet : Re: NAS in sql and returning specific VSAs

Hi,
...
Hi all,

I just tried using

if(%Client-Type == 'cisco'){
                                Service-Type = NAS-Prompt-User
                                cisco-avpair = "shell:priv-lvl=15"
                        }
if(%Client-Type == 'cisco'){
		update reply {
                                    Service-Type = NAS-Prompt-User
                                    cisco-avpair = "shell:priv-lvl=15"
				}
                            }

?

alan
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-- 
Ce message a ete verifie par MailScanner.

RE: NAS in sql and returning specific VSAs

Vincent, Fabien