Hi, Is there any way to make freeradius assign a vlan to any user that was authenticated using active directory database? Something like, freeradius asks active directory for user authenticity, and if accepted, freeradius forwards always the same tunnel-pvt-group-id to NAS. Thanks, Nuno Reis -- View this message in context: http://www.nabble.com/default-vlan-for-ldap-users-t1538508.html#a4179753 Sent from the FreeRadius - User forum at Nabble.com.
Nuno Reis <nuno.mrr@gmail.com> wrote:
Is there any way to make freeradius assign a vlan to any user that was authenticated using active directory database? Something like, freeradius asks active directory for user authenticity, and if accepted, freeradius forwards always the same tunnel-pvt-group-id to NAS.
You can do this in the post-auth section. Usually, though, it's easier to just always assign them to a VLAN group. If they're rejected they won't use it, and if they're accepted they will. Alan DeKok.
Nuno Reis wrote:
Hi,
Is there any way to make freeradius assign a vlan to any user that was authenticated using active directory database? Something like, freeradius asks active directory for user authenticity, and if accepted, freeradius forwards always the same tunnel-pvt-group-id to NAS.
Add a DEFAULT entry into the "users" file specifying the attributes you want returned, and ensure that "files" is invoked in the "authorize" section of radiusd.conf. best regards, josh.
participants (3)
-
Alan DeKok -
Josh Howlett -
Nuno Reis