Hello, This pertains to Feeradius 1.1.0. I am having trouble setting up freeradius and Checkpoint's Secureplatform Pro (SPLAT) firewall (which is a stripped down Linux) so that administrators logging into the firewalls will be authenticated by the freeradius server. According to the SPLAT pro user guide I should be able to set up a group on the firewall and I should not have to define all the individual users on the firewall. Once the user enters the username and password that info will be passed to the freeradius server along with the group (which is already defined on the firewall). When I start the freeradius server with the -AX switches I really don't see it reading the following that I set up in the radiusd.conf file: passwd etc_group { filename = /etc/freeradius/group format = "=Group-Name:::*,User-Name" hashsize = 50 ignorenislike = yes allowmultiplekeys = yes delimiter = ":" } I'm not sure if this is how you tell it to look in the group file and not sure why I do not see this in the messages when I start freeradius....??? Is anybody else doing this and if so can you provide some guidance? Thanks so much. Regards, Patrick Enright Information Security Architecture Team patrick.enright@acxiom.com <mailto:patrick.enright@acxiom.com> ************************************************************************* The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please resend this communication to the sender and delete the original message or any copy of it from your computer system. Thank you. *************************************************************************
Enright Patrick - penrig wrote:
I’m not sure if this is how you tell it to look in the group file and not sure why I do not see this in the messages when I start freeradius….???
G'day Patrick, You've defined the etc_group module but you also need to instantiate it. Add etc_group to the authorize { } section further down in radiusd.conf. -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia. Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: james.wakefield@deakin.edu.au Website: http://www.deakin.edu.au
Enright Patrick - penrig wrote:
When I start the freeradius server with the –AX switches I really don’t see it reading the following that I set up in the radiusd.conf file:
passwd etc_group { filename = /etc/freeradius/group format = "=Group-Name:::*,User-Name"
You can't use the Group-Name attribute. That's reserved for Unix groups. You have to define your own attribute. See "man rlm_passwd" for examples/
I’m not sure if this is how you tell it to look in the group file
See "man rlm_passwd". It gives examples. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan DeKok -
Enright Patrick - penrig -
James Wakefield