Suppose I store the users in the following format in user file. *bob Mygroup := 'guests', Cleartext-Password := 'hello'* *test Mygroup := 'staff', Cleartext-Password := '123456'* When I authenticate the particular user in freeradius server then how can I know which group the user belongs to (*guests* or *staff*). Thank you, Best Regards,*Mallikarjuna PK*Email: mallikarjuna.peddappanavara@igrid-td.com Mobile: +91-9535744695 On 24 July 2018 at 16:49, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 24, 2018, at 7:02 AM, Mallikarjuna Peddappanavara Karibasappa < mallikarjuna.peddappanavara@igrid-td.com> wrote:
I'm implementing freeradius client in nginx web server, As of now I can able authenticate the users in radius server. Now I need to assign roles
to
the users in freeradius server. When a particular user is authenticated in freeradius server then I need to get that user role of that particular user in my nginx server.
What's a "role" ?
I'm struck with the issue that I'm not able to add user roles in freeradius server. Is it possible to set user roles and get that user roles ?
I think you're missing something fairly large here. You're talking about concepts. RADIUS doesn't deal with concepts. It deals with attributes.
So... you need to decide which attribute will contain this "role". You need to decide how to determine which user gets which role.
Then, configure that in FreeRADIUS.
When you ask vague high-level questions, the only response you'll get is vague high-level answers.
If you want more detailed answers, ask more detailed questions. You've already been told this. So there's no excuse.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html