returning an arbitrary attribute from LDAP
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, I'm trying to ascertain how to have radiusd return an arbitrary attribute with each successful authentication. My radiusds are doing PEAP/MS-CHAPv2 against Kerberos for authn, and it seems like activating rlm_ldap for authz will cause "Auth-Type = LDAP" to enter my world, which I'm betting will break things. Also, I'm fuzzy as to where I'd do this sort of thing anyway; it seems that post-auth would be the place to start, but am uncertain. Any guidance you could offer (including pointers to existing mailing list threads or other docs) would be much appreciated. Cheers, - -sth sam hooker|sth@noiseplant.com|http://www.noiseplant.com "I have not failed, I've just found 10,000 ways that won't work." Thomas Edison -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version: 0.7.9) iEYEARECAAYFAkrTglwACgkQX8KByLv3aQ2jdgCgpmoEskDoJGeoN2+ySzKRUqK9 /RUAoMGhPZ651eOj3oXGBtSf8ihwcHWO =e5Qa -----END PGP SIGNATURE-----
Sam Hooker wrote:
I'm trying to ascertain how to have radiusd return an arbitrary attribute with each successful authentication. My radiusds are doing PEAP/MS-CHAPv2 against Kerberos for authn, and it seems like activating rlm_ldap for authz will cause "Auth-Type = LDAP" to enter my world, which I'm betting will break things. Also, I'm fuzzy as to where I'd do this sort of thing anyway; it seems that post-auth would be the place to start, but am uncertain. Any guidance you could offer (including pointers to existing mailing list threads or other docs) would be much appreciated.
See raddb/ldap.attrmap Alan DeKok.
participants (2)
-
Alan DeKok -
Sam Hooker