Multiple Radius Group Name
Hi group. I have a freeradius 2.2.5 in a debian 8 box with an OpenLdap database. A simple query: angel.elena@bulma:/etc/freeradius$ radtest angel.elena password localhost:1812 0 testing123 Sending Access-Request of id 100 to 127.0.0.1 port 1812 User-Name = "angel.elena" User-Password = "password" NAS-IP-Address = 1.1.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=100, length=47 Mikrotik-Group = "AAA_ADMIN" Mikrotik group is a mapped attribute in a ldap.attrmap file and works fine: replyItem Mikrotik-Group radiusGroupName for a new setup and to not modify all devices, we need specify two radiusGroupName / Mikrotik-Group in every query, ex: Mikrotik-Group = "AAA_ADMIN" Mikrotik-Group = "AAA_CORES" Is possible specify two radiusGroupName in a simple reply or any idea to set this setup ? Thanks. -------------------------------- Ángel Elena Medina _o) craem@craem.net / \\ http://blog.craem.net _(___V @craem_ www.linkedin.com/in/angel-elena-medina -------------------------------- Zarafa Webapp.
On Apr 23, 2018, at 12:20 PM, Angel Elena <craem@craem.net> wrote:
I have a freeradius 2.2.5 in a debian 8 box with an OpenLdap database.
You should really upgrade to 2.2.10 at least. It takes about 10 minutes.
A simple query:
angel.elena@bulma:/etc/freeradius$ radtest angel.elena password localhost:1812 0 testing123
We don't need to see the output of radclient. http://wiki.freeradius.org/list-help
Mikrotik group is a mapped attribute in a ldap.attrmap file and works fine:
replyItem Mikrotik-Group radiusGroupName\
See the comments at the top of that file. If the comments aren't there, someone probably deleted them. Or, install 2.2.10, and look at the comments at the top of ldap.attrmap in the source file.
Is possible specify two radiusGroupName in a simple reply or any idea to set this setup ?
Yes. It's documented in that file. You need to set the operator to "+=" Alan DeKok.
participants (2)
-
Alan DeKok -
Angel Elena