RE: Re: Configure Freeradius Server on a Synology NAS to Authenticate Cisco RV340 Users
1. I was unable to find any vendor documention that would explain how to make it work. Both, Synology and Cisco, development level technical support couldn't help either and referred me to Freeradius or "other online sources". 2. I am not familiar with RADIUS server environment nor am I a programmer, so even after reading the documentation I am still not sure which file(s) to input the code into or what the correct code should be. 3. I am not looking for a lecture (though, if that's what gets you off, I am happy to provide the opportunity) nor for other people to do my work for me (I've spent many hours trying to get it to work with nothing to show for it), but was rather hoping that someone has already solved that problem and was willing to share the solution. 4. The group names are stored in the local user database of the Synology NAS; its RADIUS server, which is essentially Freeradius, is configured via GUI to use that database. 5. If I knew what additional information is needed, I'd be glad to provide it, if I can. vl -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+vladlevin=geo-logic.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, September 03, 2019 1:49 PM To: FreeRadius users mailing list Subject: ++++SPAM++++ Re: Configure Freeradius Server on a Synology NAS to Authenticate Cisco RV340 Users On Sep 3, 2019, at 4:39 PM, Levin, Vladimir <vladlevin@geo-logic.com> wrote:
Could anyone provide instructions on how to configure Freeradius server on a Synology NAS to authenticate Cisco RV340 users? Specifically, I need to configure the server to send radius attribute class 25 with user group name back to the client (RV340).
We don't have documentation for commercial vendors here. Please read *their* documentation to see what they accept. If you want to send a Class attribute back to the NAS, read "man unlang". It contains complete descriptions of how to send attributes. Plus, read sites-available/default. There are lots of examples there. i.e. *read* the documentation instead of asking other people to do your work for you. If you can't be bothered to read the documentation and follow it, we can't be bothered, too. And *where* is the group name stored? FreeRADIUS isn't a database. We don't store groups. So it has to come from somewhere. How can we help you if you ask vague questions, and don't give us enough information? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 3, 2019, at 9:22 PM, Levin, Vladimir <vladlevin@geo-logic.com> wrote:
1. I was unable to find any vendor documention that would explain how to make it work. Both, Synology and Cisco, development level technical support couldn't help either and referred me to Freeradius or "other online sources".
My point was that we can answer questions about FreeRADIUS. We *can't* answer questions about what attributes are needed by a particular NAS. Or, what values should be used for those attributes. Only the vendor documentation has that information. Once you know which attributes need to be returned, and what values they have, it's easy to configure FreeRADIUS. And we can definitely help there.
2. I am not familiar with RADIUS server environment nor am I a programmer, so even after reading the documentation I am still not sure which file(s) to input the code into or what the correct code should be.
"correct code" to do... what? Saying "I'm not familiar with RADIUS" is a *terrible* answer. We know. You MUST be willing to *learn* about it.
3. I am not looking for a lecture (though, if that's what gets you off, I am happy to provide the opportunity) nor for other people to do my work for me (I've spent many hours trying to get it to work with nothing to show for it), but was rather hoping that someone has already solved that problem and was willing to share the solution.
I was hoping you would answer my question instead of complaining or making personal insults. The point was if you want to return an attribute, there is TONS of documentation telling you what to do. Just look for "Class" in the default configuration, and you will see examples of comparing the Class attribute to something, or setting its value. And no, no one has solved your particular problem before. It's unusual, hence my reply of "what do you mean?" If it was a common problem, then it would have been documented. Yes, it's 2019. Complaints about the FreeRADIUS documentation are no longer relevant. While the documentation isn't perfect, it clearly describes the syntax of the configuration files. The default virtual servers are heavily commented and documented. All that is necessary is that you *read* it, and ask *specific questions* when you don't understand something. It's just not useful to say "I've spent many hours trying to get it to work with nothing to show for it". That's a complaint of "I did stuff and it didn't work. But I'm not going to tell you what I did!" How do you expect us to be able to help you, then?
4. The group names are stored in the local user database of the Synology NAS; its RADIUS server, which is essentially Freeradius, is configured via GUI to use that database.
That means nothing. WHAT kind of database is it? HOW does FreeRADIUS query it?
5. If I knew what additional information is needed, I'd be glad to provide it, if I can.
Give sufficient technical information so that people can help you. Your description is vague. "Database" isn't helpful. "MySQL" is helpful. "MySQL and here's a copy of the schema" is helpful. You're asking us how to configure "stuff". And when I point out that description isn't good enough, you don't respond with a clearer description. That's not productive. Alan DeKok.
On Wed, Sep 4, 2019 at 8:24 AM Levin, Vladimir <vladlevin@geo-logic.com> wrote:
1. I was unable to find any vendor documention that would explain how to make it work. Both, Synology and Cisco, development level technical support couldn't help either and referred me to Freeradius or "other online sources". 2. I am not familiar with RADIUS server environment nor am I a programmer, so even after reading the documentation I am still not sure which file(s) to input the code into or what the correct code should be. 3. I am not looking for a lecture (though, if that's what gets you off, I am happy to provide the opportunity) nor for other people to do my work for me (I've spent many hours trying to get it to work with nothing to show for it), but was rather hoping that someone has already solved that problem and was willing to share the solution. 4. The group names are stored in the local user database of the Synology NAS; its RADIUS server, which is essentially Freeradius, is configured via GUI to use that database. 5. If I knew what additional information is needed, I'd be glad to provide it, if I can.
To summarize what you wrote: - synology includes a radius software, which is supposed to be freeradius - you have no details on how synology implement their radius - you want to use its bundled radius to authenticate cisco Is that correct? If so, then it seems that the only supported use of synology's radius is whatever they tell you it can do (e.g. authenticate NAS users). If you're using it for something other than its supported use, then you're basically on your own. Having said that, you might be able to perform additional configguration on it if: - you have no problem with potentially breaking (or voiding warranty) your synlogy nas - you have access to command line - you are familiar with configuring software directly via command line - you can read (and implement) the docs As for "send radius attribute", if it were a normal freeradius installation with mysql backend, and the attribute is specific to each user, you probably need to add entries to radreply table, e.g. https://wiki.freeradius.org/guide/SQL-HOWTO#populating-sql However if you have only access to synology's GUI, and it does not show similar option, and you don't have access to the underlying database directly, then your best bet is to simply install a separate freeradius server for cisco. -- Fajar
vl -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+vladlevin=geo-logic.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, September 03, 2019 1:49 PM To: FreeRadius users mailing list Subject: ++++SPAM++++ Re: Configure Freeradius Server on a Synology NAS to Authenticate Cisco RV340 Users
On Sep 3, 2019, at 4:39 PM, Levin, Vladimir <vladlevin@geo-logic.com> wrote:
Could anyone provide instructions on how to configure Freeradius server on a Synology NAS to authenticate Cisco RV340 users? Specifically, I need to configure the server to send radius attribute class 25 with user group name back to the client (RV340).
We don't have documentation for commercial vendors here. Please read *their* documentation to see what they accept.
If you want to send a Class attribute back to the NAS, read "man unlang". It contains complete descriptions of how to send attributes. Plus, read sites-available/default. There are lots of examples there.
i.e. *read* the documentation instead of asking other people to do your work for you. If you can't be bothered to read the documentation and follow it, we can't be bothered, too.
And *where* is the group name stored? FreeRADIUS isn't a database. We don't store groups. So it has to come from somewhere.
How can we help you if you ask vague questions, and don't give us enough information?
Alan DeKok.
participants (3)
-
Alan DeKok -
Fajar A. Nugraha -
Levin, Vladimir