Hello, Do you known how to use LDAP as users database and MySQL for store Cisco-AVPair attributes ? When i only use MySQL it's working : radtest -x test password 127.0.0.1 0 TEST Sent Access-Request Id 75 from 0.0.0.0:32889 to 127.0.0.1:1812 length 81 User-Name = "test" User-Password = "password" NAS-IP-Address = 10.20.20.2 NAS-Port = 0 Message-Authenticator = 0x00 Cleartext-Password = "password" Received Access-Accept Id 75 from 127.0.0.1:1812 to 0.0.0.0:0 length 58 Cisco-AVPair = "ip:inacl#5=permit icmp any any" But i really don't know how to use both Thank for your help Charly
On Apr 11, 2018, at 11:31 AM, Charly <netflow@geosciences.ensmp.fr> wrote:
Do you known how to use LDAP as users database and MySQL for store Cisco-AVPair attributes ?
Configure both modules, and put data into both modules. That's pretty much it. i.e. names && passwords in LDAP. Then names && reply attributes in SQL. The default configuration lists with "ldap" and "sql" in the "authorize" section. So it will work. Alan DeKok.
Thank you Alan, nothing in authenticate section ? Le 11/04/2018 à 17:33, Alan DeKok a écrit :
On Apr 11, 2018, at 11:31 AM, Charly <netflow@geosciences.ensmp.fr> wrote:
Do you known how to use LDAP as users database and MySQL for store Cisco-AVPair attributes ? Configure both modules, and put data into both modules. That's pretty much it.
i.e. names && passwords in LDAP. Then names && reply attributes in SQL.
The default configuration lists with "ldap" and "sql" in the "authorize" section. So it will work.
Alan DeKok.
It works only if the user exists in radcheck table. Do you have a solution to avoid duplicating users ? Le 11/04/2018 à 18:07, Alan DeKok a écrit :
On Apr 11, 2018, at 11:37 AM, Charly <netflow@geosciences.ensmp.fr> wrote:
Thank you Alan, nothing in authenticate section ? It shouldn't be necessary.
Alan DeKok.
participants (2)
-
Alan DeKok -
Charly