Assistance with FreeRADIUS and Windows Authentication via LDAP
Hello, I am running FreeRADIUS version 1.1.3. I'm trying to setup LDAP authentication for Windows users accessing our networking devices especially with Cisco switches and routers. Windows authentication is working properly on my FreeRADIUS server, but I'm trying to figure out how to give different users special privilege access without providing them the enable password. I'd like to specify another Security group with providing them a read-only or special privilege mode with their Windows account. Is this possible? I'm new with using FreeRADIUS, please help. Thanks, Edwin
I am running FreeRADIUS version 1.1.3.
Why? Upgrade to current version.
I'm trying to setup LDAP authentication for Windows users accessing our networking devices especially with Cisco switches and routers. Windows authentication is working properly on my FreeRADIUS server, but I'm trying to figure out how to give different users special privilege access without providing them the enable password. I'd like to specify another Security group with providing them a read-only or special privilege mode with their Windows account. Is this possible?
Yes. Send them priv-level Cisco AVpair. You will need add that attribute mapping to ldap.attrmap. Ivan Kalik Kalik Informatika ISP
Edwin Isada wrote:
I am running FreeRADIUS version 1.1.3.
Why?
I'm trying to setup LDAP authentication for Windows users accessing our networking devices especially with Cisco switches and routers. Windows authentication is working properly on my FreeRADIUS server, but I'm trying to figure out how to give different users special privilege access without providing them the enable password. I'd like to specify another Security group with providing them a read-only or special privilege mode with their Windows account. Is this possible? I'm new with using FreeRADIUS, please help.
Yes, it's possible. See "doc/rlm_ldap" for going LDAP group checking in the server. You should use a new version of the server, not one that is 2-3 years old. Alan DeKok.
participants (3)
-
Alan DeKok -
Edwin Isada -
tnt＠kalik.net