LDAP retrieve additional attributes and map to radius attributes
Hi, Sorry if this question is a repeat but I saw the mail archives and not able to find what I am looking for. We are using freeradius to connect to LDAP server. I can able to authenticate with the radius sever fine. Now I want to retrieve ldap attribute called productId. Depends on the productId, I have to give access the users. If the productId=1234, then all the users will get access. If not..no access. After reading the mail archives and documentation, I saw I need to do changes in /etc/raddb/dictionary,/etc/raddb/users, /etc/raddb/ldap.attrmap Can you please explain me what is the right config I need to modify. You help is really appreciated. Thanks and regards. Here is the radiusd.conf for ldap. ldap { server = "testldap.xyz.com" identity = "cn=Directory Manager" password = 1223 basedn = "dc=test1213,dc=household,o=internet" filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" encryption_scheme = crypt start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 password_attribute = userPassword timeout = 4 timelimit = 3 net_timeout = 1 #compare_check_items = yes #do_xlat = yes # access_attr_used_for_allow = yes } __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Can someone please help me out with this issue? Will really appreciate. Thanks in advance. --- Workout Yahoo <workoutexcite@yahoo.com> wrote:
Hi, Sorry if this question is a repeat but I saw the mail archives and not able to find what I am looking for.
We are using freeradius to connect to LDAP server. I can able to authenticate with the radius sever fine.
Now I want to retrieve ldap attribute called productId. Depends on the productId, I have to give access the users.
If the productId=1234, then all the users will get access. If not..no access.
After reading the mail archives and documentation, I saw I need to do changes in /etc/raddb/dictionary,/etc/raddb/users, /etc/raddb/ldap.attrmap
Can you please explain me what is the right config I need to modify.
You help is really appreciated. Thanks and regards.
Here is the radiusd.conf for ldap.
ldap {
server = "testldap.xyz.com" identity = "cn=Directory Manager" password = 1223 basedn = "dc=test1213,dc=household,o=internet"
filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" encryption_scheme = crypt start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap
ldap_connections_number = 5
password_attribute = userPassword timeout = 4 timelimit = 3 net_timeout = 1
#compare_check_items = yes #do_xlat = yes # access_attr_used_for_allow = yes
}
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Workout Yahoo wrote:
Can someone please help me out with this issue? Will really appreciate.
We got your email. 3 times now in 2 days. Please be patient, this is not a paid support forum; you are not guaranteed answers in 30 minutes or less. If you annoy people by repeatedly posting the same exact question, you will be ignored. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
Sorry for couple of mails but if someone give me a right direction where to look that will be great. As wiki is down, its hard for me to look for the answer. Thanks and Regards. --- Dennis Skinner <dskinner@bluefrog.com> wrote:
Workout Yahoo wrote:
Can someone please help me out with this issue? Will really appreciate.
We got your email. 3 times now in 2 days. Please be patient, this is not a paid support forum; you are not guaranteed answers in 30 minutes or less. If you annoy people by repeatedly posting the same exact question, you will be ignored.
-- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Figured it out.. Just enabled access_attr=product_id ldap attr. Thanks. --- Workout Yahoo <workoutexcite@yahoo.com> wrote:
Sorry for couple of mails but if someone give me a right direction where to look that will be great. As wiki is down, its hard for me to look for the answer.
Thanks and Regards.
--- Dennis Skinner <dskinner@bluefrog.com> wrote:
Workout Yahoo wrote:
Can someone please help me out with this issue? Will really appreciate.
We got your email. 3 times now in 2 days. Please be patient, this is not a paid support forum; you are not guaranteed answers in 30 minutes or less. If you annoy people by repeatedly posting the same exact question, you will be ignored.
-- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
I will be really appreciated if someone points me to the right direction or archive of the thread. Thanks in advance. Regards. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
It will be postauth that you need. Unfortunately Im still learning that part myself (when I have spare time). On 5/8/07, Eric Martell <workoutexcite@yahoo.com> wrote:
I will be really appreciated if someone points me to the right direction or archive of the thread.
Thanks in advance. Regards.
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Dennis Skinner -
Eric Martell -
Jacob Jarick -
Workout Yahoo