That helps, Alan. Let me try with LDAP group checks. Thanks. Regards, Deepansha Gaur ________________________________ From: Freeradius-Users <freeradius-users-bounces+dgaur=ualberta.ca@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Monday, June 3, 2024 4:54 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Assign user to a realm. On Jun 2, 2024, at 9:29 PM, Deepansha Gaur <dgaur@ualberta.ca> wrote:
Right now, we are using vpn contexts to assign users to a particular vlan. Eg: if a user logs in with his ccid, he’s assigned a default VLAN, if they login with ccid@realm1 , they’re assigned Vlan 121. We’re now moving to freeradius and I want to implement the same using realms.
You're saying essentially the same thing over and over again. that doesn't help. I had asked for more details, and you're not really giving them.
Or if I can assign a vlan to a particular ldap group.
Yes. Unlang allows you to (a) do LDAP group checks, and (b) assign VLANs. All you have to do is put the two together. The documentation gives dozens of examples of nearly everything the server can do. The LDAP module documentation shows how to connect the server to LDAP, and how to do LDAP group checking. Then in the default virtual server, you can do: if (LDAP-Group == "foo") { update reply { ... assign VLAN ... } } Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html