I'm using FreeRADIUS 1.0.5. to authenticate admin logins to a NetScreen5. I'm able to authenticate accounts just fine. Now I'd like to begin pulling administrative privileges from the Radius server, but I haven't figured out how to do that. I've referenced the dictionary.netscreen file in my clients.conf file, nastype = netscreen, but I'm embarrassed to say I can't figure out the format for including the dictionary attributes for a user in my users file.
I've tried various permutations like:
markt Auth-Type := Local, User=Password == "testing" NS-Admin-Privilege = "Read-Only-Admin"
and:
markt Auth-Type := Local, User=Password == "testing" Netscreen-NS-Admin-Privilege = "Read-Only-Admin"
Nothing's working. Can some one show me the correct syntax?
Thank you,
Mark - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Mark, I am having the same problems. I can authenticate fine, however, when I try and authorize via radius all logins fail (although RADIUS shows them to succeed. If I find the solution I will forward it along. Cheers, Chad