manage RADIUS clients in LDAP directory
HI! Is there a how-to document which describes managing RADIUS clients with their shared secrets in LDAP directory? Something like this should just work? ldap { server = 'ldapi://' identity = 'uid=radiusd,ou=ae-dir' password = secret base_dn = 'ou=ae-dir' [..] client { base_dn = "${..base_dn}" filter = '(objectClass=radiusClient)' scope = 'sub' template { require_message_authenticator = yes } attribute { ipaddr = 'aeRemoteHost' secret = 'radiusClientSecret' shortname = 'uid' } } } Ciao, Michael.
hi, try this as a starting point: http://freeradius.1045715.n5.nabble.com/HOWTO-Centralised-LDAP-Authenticatio... alan
On 31/10/2016 13:47, Alan Buxey wrote:
try this as a starting point:
http://freeradius.1045715.n5.nabble.com/HOWTO-Centralised-LDAP-Authenticatio...
And do remember that if requests are coming via RADIUS proxies, then the IP address of the device originating the request (NAS-IP-Address) is not necessarily the same as the source IP address of the RADIUS packet (Client-IP-Address or FreeRADIUS-Client-IP-Address or Packet-Src-IP-Address). The latter will just be the address of the proxy. Regards, Brian.
participants (3)
-
Alan Buxey -
Brian Candler -
Michael Ströder