Active Directory/freeradius/enterasys - combination

Phil Mayers p.mayers at imperial.ac.uk
Mon Aug 21 14:59:37 CEST 2006


Michael Messner wrote:
> If I define the users on the Radius with the help of the users file it
> is no problem and it works perfectly, but how can I use the information
> from the AD?

Use the "ldap" module to query AD and add attributes to the reply 
dynamically. For example:

DEFAULT	Ldap-Group == "cn=students,dc=domain,dc=com"
	Filter-Id = "Enterasys:version=1:mgmt=su:policy=userrole"

...or similar.





More information about the Freeradius-Users mailing list