Obtaining Radius attributes for a user
Is it possible to obtain the attributes associated with a user defined in a Radius server, after having authenticated the user? My guess is that such attributes can only be retrieved as the successful response to an Access-Request, embedded in the Access-Accept message. Thus, if one wants to obtain such attributes again, the authentication must be completed again. Is this correct?
On Aug 29, 2019, at 2:22 PM, JCA <1.41421@gmail.com> wrote:
Is it possible to obtain the attributes associated with a user defined in a Radius server, after having authenticated the user?
The RADIUS server doesn't really define attributes for a user. It returns attributes in a packet, but those attributes may have come from many different sources.
My guess is that such attributes can only be retrieved as the successful response to an Access-Request, embedded in the Access-Accept message.
Thus, if one wants to obtain such attributes again, the authentication must be completed again. Is this correct?
Yes. Or, in the "post-auth" section, write the attributes somewhere. Alan DeKok.
participants (2)
-
Alan DeKok -
JCA