Hi I have Freeradius configured with a backend of OpenLdap for user management. I would like to be able to pass attributes for Nortel and Juniper gear, which when statically defining users in user file is done via: user Auth-type:=Local, User-Password := "test" Juniper-Local-User-Name ="DEV", Service-Type = Administrative-User Is there a way to pass these attributes when using Ldap for user management? thanks Ivan
Yes. Add the reply attributes to ldap.attrmap. Ivan Kalik Kalik Informatika ISP Dana 28/8/2008, "Ivan ." <ivanhec@gmail.com> piše:
Hi
I have Freeradius configured with a backend of OpenLdap for user management.
I would like to be able to pass attributes for Nortel and Juniper gear, which when statically defining users in user file is done via:
user Auth-type:=Local, User-Password := "test" Juniper-Local-User-Name ="DEV", Service-Type = Administrative-User
Is there a way to pass these attributes when using Ldap for user management?
thanks Ivan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi any chance you can provide the actual syntax of whats required? replyItem Service-Type Administrative-User replyItem Juniper-Local-User-Name DEV Sorry, a bit of a novice freeraidus user thanks Ivan 2008/8/29 Ivan Kalik <tnt@kalik.net>:
Yes. Add the reply attributes to ldap.attrmap.
Ivan Kalik Kalik Informatika ISP
Dana 28/8/2008, "Ivan ." <ivanhec@gmail.com> piše:
Hi
I have Freeradius configured with a backend of OpenLdap for user management.
I would like to be able to pass attributes for Nortel and Juniper gear, which when statically defining users in user file is done via:
user Auth-type:=Local, User-Password := "test" Juniper-Local-User-Name ="DEV", Service-Type = Administrative-User
Is there a way to pass these attributes when using Ldap for user management?
thanks Ivan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
any chance you can provide the actual syntax of whats required?
Syntax is the same as for other entries: replyItem radiusAttribute ldapAttribute so something like: replyItem Service-Type radiusServiceType replyItem Juniper-Local-User-Name juniperLocalName
replyItem Service-Type Administrative-User replyItem Juniper-Local-User-Name DEV
This is wrong. Values should be placed into ldap attribute fields in user profile. You will need to add those new attributes to ldap schema as well. Ivan Kalik Kalik Informatika ISP
participants (2)
-
Ivan . -
Ivan Kalik