users match list criteria and vendor identification
Hi I am trying to find a list of the criteria you can use in the users file on the match line, I came across a lengthy list/table earlier but can't seem to find it again. I have looked at the attributes RFC, but I'm looking more for something that will list things like Group-Name, Auth-Type, and more importantly the other possible criteria I can include there. One of the things I am curious to see is if there is a Vendor-ID attribute, does anyone know if there is? Any help is greatly appreciated. Cheers Cam. -- "We are all in the gutter, but some of us are looking at the stars." - Oscar Wilde
Cameron Wood wrote:
Hi I am trying to find a list of the criteria you can use in the users file on the match line, I came across a lengthy list/table earlier but can't seem to find it again.
$ man users ?
I have looked at the attributes RFC, but I'm looking more for something that will list things like Group-Name, Auth-Type, and more importantly the other possible criteria I can include there.
That isn't documented, unfortunately. We welcome additional documentation, however.
One of the things I am curious to see is if there is a Vendor-ID attribute, does anyone know if there is?
I have no idea what that means. The server comes with many vendor-specific dictionaries. You can read them to find out which VSAs are defined. Alan DeKok.
Hi Alan thanks for the reply. Is there a way to identify the vendor/device-type of a radius request? Do clients send a Vendor-ID/Private Enterprise Number such as that listed in a VSA Dictionary. Cheers Cam. -- On Wed, Sep 22, 2010 at 15:46, Alan DeKok <aland@deployingradius.com> wrote:
Cameron Wood wrote:
Hi I am trying to find a list of the criteria you can use in the users file on the match line, I came across a lengthy list/table earlier but can't seem to find it again.
$ man users ?
I have looked at the attributes RFC, but I'm looking more for something that will list things like Group-Name, Auth-Type, and more importantly the other possible criteria I can include there.
That isn't documented, unfortunately. We welcome additional documentation, however.
One of the things I am curious to see is if there is a Vendor-ID attribute, does anyone know if there is?
I have no idea what that means.
The server comes with many vendor-specific dictionaries. You can read them to find out which VSAs are defined.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Cameron Wood wrote:
Is there a way to identify the vendor/device-type of a radius request?
Look at the side of the box. That's it.
Do clients send a Vendor-ID/Private Enterprise Number such as that listed in a VSA Dictionary.
Do you see that information in a RADIUS packet? It's really not complicated. If you see it in a RADIUS packet... it exists, and you can use it to make decisions. If you don't see it in a RADIUS packet, well... you're stuck. Alan DeKok.
participants (2)
-
Alan DeKok -
Cameron Wood