Freeradius and Netscreen VPN Authentication
Greetings, I've been attempting to get freeradius-1.0.2-2 on Fedora core 4 to send the correct authentication information to my Netscreen VPN device. my test user information within the /etc/raddb/users file consists of: freeradius Auth-Type := Accept, Password=abcd1234, Ns-User-Group == Some_Secure_grp --------- When I remove the user-group "Some_Secure_grp" from the following Netscreen configuration line, I'm able to connect if I remove "Ns-User-Group == Some_Secure_grp" from the configuration line from raddb's users file. set ike gateway "GATEWAY-SOME_SECURE_GRP" xauth server "FreeRadius" user-group "Some_Secure_grp" --------- If I attempt to utilize group authentication, I recieve the following information in my event log on the Netscreen device: 2005-11-23 14:31:56 system notif 00767 User freeradius belongs to a different group in the RADIUS server than one allowed in the device --------- If anyone has any ideas, Id greatly appreciate it. Juniper doesn't really have many people on their staff that has in depth experience with freeradius.
Has anyone had any success with integrating Netscreen Group authentication with FreeRadius? I'm able to authenticate the individual user account, but the minute I try to put the users in the various groups, the authentication fails with a "...belongs to a different group in the RADIUS server than one allowed in the device" error. ---------- Original Message ----------- From: "freeradius" <freeradius@gardrail.com> To: freeradius-users@lists.freeradius.org Sent: Fri, 25 Nov 2005 08:27:09 -0500 Subject: Freeradius and Netscreen VPN Authentication
Greetings,
I've been attempting to get freeradius-1.0.2-2 on Fedora core 4 to send the correct authentication information to my Netscreen VPN device. my test user information within the /etc/raddb/users file consists of:
freeradius Auth-Type := Accept, Password=abcd1234, Ns-User-Group == Some_Secure_grp
---------
When I remove the user-group "Some_Secure_grp" from the following Netscreen configuration line, I'm able to connect if I remove "Ns-User-Group == Some_Secure_grp" from the configuration line from raddb's users file.
set ike gateway "GATEWAY-SOME_SECURE_GRP" xauth server "FreeRadius" user-group "Some_Secure_grp"
---------
If I attempt to utilize group authentication, I recieve the following information in my event log on the Netscreen device:
2005-11-23 14:31:56 system notif 00767 User freeradius belongs to a different group in the RADIUS server than one allowed in the device
---------
If anyone has any ideas, Id greatly appreciate it. Juniper doesn't really have many people on their staff that has in depth experience with freeradius. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------- End of Original Message -------
participants (1)
-
freeradius