On Mon, Jun 28, 2010 at 05:08:54PM -0400, Maria Sanchez wrote:

The only information I found related to configuring roles indicated that I had to enter a new attribute in the dictionary file, add the attribute in the users file with the value I needed and add the dictionary file as a parameter to the radtest (-d directory) to be able to see the attribute in the returned message... Well this is not working as described...

For starters, avoid custom attributes and dictionaries, and just try a standard attribute first. Pick an attribute with a string value from the basic specification (RFC2865), assign a value to it, and check for it in the reply. -- 2. That which causes joy or happiness.

Maria Sanchez wrote:

I am getting familiar with FreeRadius since it is being proposed in the designs as our Authentication/Authorization server. I have successfully installed and started the server and I have done some calls using the radtest client script. I am currently only using the users file to create new users since my goal at this time is validating concepts…. I am currently trying to assign a Role to one of my users and get that value returned to the client. I am still using the radtest client.

What do you mean by "role" ? Is this role for use by a real client, i.e. *not* radclient? If so, see the client documentation for what attribute to send.

The only information I found related to configuring roles indicated that I had to enter a new attribute in the dictionary file, add the attribute in the users file with the value I needed and add the dictionary file as a parameter to the radtest (-d directory) to be able to see the attribute in the returned message… Well this is not working as described… Any idea or reference document I can use to have this configured?

The dictionary file has a "man" page. The comments at the top of the dictionary file describe the format, too. In general, you need to edit the dictionaries *only* if you're writing your own RADIUS client (i.e. NAS). Otherwise, don't touch them. Alan DeKok.