RE: Static IP Address allocation database - Active Directory?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Has anyone experimented with using Active Directory as a database for Static IP Addressing? Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfectly. There is no need to make a user member of a 'radius_staticip' Group.
J. - -- Jonathan De Graeve IMELDA vzw Informatica Dienst Network System Engineer jonathan.de.graeve@imelda.be +32(0)15/50.52.98 -----BEGIN PGP SIGNATURE----- Version: 9.5.0 (Build 1202) wsBVAwUBRUG6jdjY2X/BrZGJAQgslggAmOMNyQR2lingFOOZas2+tRm2DM7+LgrG A8PNHcGxeMIWhtksMm++/nWwwZgK0PrBXECeX13fJf+mmgt3U1V1oXsD58HUAFJj VW+PW9O8o8ef5Br+03pzrIV0enZ6N4AmUOz42JudO4qPrUdrE7SyKDkz41vu8gSz dhW7SO9nTR7h9r688XqJnQU+w6ZQi2AUTumQ+9rvNn6UMS7AhzoNm0naH5tTp0Ql LUPEMByf4O6e4Ucuqd1SJk+gyeKD+ZsZ93YzmFP8btevLAnIw3VK2lnT0gwcejlD FIlkGc7Rt+DJ9Dznn3BXk19hZxNqnsPBDs1rZOX8nGdo7uLdjHctSQ== =tLiY -----END PGP SIGNATURE-----
On 10/27/06, Jonathan De Graeve <Jonathan.De.Graeve@imelda.be> wrote:
Has anyone experimented with using Active Directory as a database for Static IP Addressing? Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfectly. There is no need to make a user member of a 'radius_staticip' Group.
Thanks, will give it a try in the morning. I've got that group used as not all users have permission to dial in to the service.
On 10/30/06, duckeo <duckeo@gmail.com> wrote:
On 10/27/06, Jonathan De Graeve <Jonathan.De.Graeve@imelda.be> wrote:
Has anyone experimented with using Active Directory as a database for Static IP Addressing? Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfectly. There is no need to make a user member of a 'radius_staticip' Group.
Okay having trouble getting this working, what attribute needs to be changed? I'm currently just using the users file to check for membership of the group and returning the correct attributes if successful. For the Static IPs I'dl ike the user to have to be a member of the group, and have the "Dial In" tab's Static IP set, and return that IP to them in the attribute.
On 10/27/06, Jonathan De Graeve <Jonathan.De.Graeve@imelda.be> wrote:
Has anyone experimented with using Active Directory as a database for Static IP Addressing? Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfectly. There is no need to make a user member of a 'radius_staticip' Group.
Some digging shows me I have in Active Directory 2003 the ldap attribute "msRadiusFramedIPAddress" corresponding to the entry in the Dial In tab. It's a string in LONGIP format at the moment, hoping I can work with that.
On 10/30/06, duckeo <duckeo@gmail.com> wrote:
On 10/27/06, Jonathan De Graeve <Jonathan.De.Graeve@imelda.be> wrote:
Has anyone experimented with using Active Directory as a database for Static IP Addressing? Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfectly. There is no need to make a user member of a 'radius_staticip' Group.
Some digging shows me I have in Active Directory 2003 the ldap attribute "msRadiusFramedIPAddress" corresponding to the entry in the Dial In tab. It's a string in LONGIP format at the moment, hoping I can work with that.
Okay it's simpler than I thought. I commented out the replyItem for Framed-IP-Address and changed the last attribute to msRADIUSFramedIPAddress and it works, if the static IP is defined in AD it is returned, else 255.255.255.254 is returned as usual.
participants (2)
-
duckeo -
Jonathan De Graeve