return user group information to radius client
Hi I am trying to create three groups of users. I want to restrict access to functionality based on which group the user is in. For this i need to get this group information in the radius client also. Is there some standard way of telling the client that this user belongs to this group.If so how do i set this on the radius server. please help. thanks, ganesh ____________________________________________________________________________________ Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail beta. http://new.mail.yahoo.com
Is there some standard way of telling the client that this user belongs to this group.If so how do i set this on the radius server.
Several NASes support the Login-LAT-Group reply attribute for this purpose: check with your NAS doc. HTH, Thibault
hi does that mean that sending/receiving of the group information would depend on the method used for auth at the radius server ? say if the server is configured for a unix authentication , then how can this info be transmitted to radius client. thanks ganesh --- Thibault Le Meur <Thibault.LeMeur@supelec.fr> wrote:
Is there some standard way of telling the client that this user belongs to this group.If so how do i set this on the radius server.
Several NASes support the Login-LAT-Group reply attribute for this purpose: check with your NAS doc.
HTH, Thibault
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Yahoo! Music Unlimited Access over 1 million songs. http://music.yahoo.com/unlimited
-----Message d'origine----- De : ganesh subramonian [mailto:gun_raj@yahoo.com] Envoyé : vendredi 1 décembre 2006 05:41 À : FreeRadius users mailing list Cc : Thibault.LeMeur@supelec.fr Objet : Re: RE : return user group information to radius client
hi does that mean that sending/receiving of the group information would depend on the method used for auth at the radius server ?
It's up to you to define if you want to return a given reply attribute: you can define different rules in order to select which reply attributes are returned given the NAS-Ip-Address, or Service-Type or any other check attributes... The issue here is to know what your NAS expects as the "user Group" information. What is your NAS ? What does the doc say about its support for replied radius attributes ? Can you explain exactly what you are trying to do ? Thibault
participants (2)
-
ganesh subramonian -
Thibault Le Meur