Local groups in FreeRadius ?

Phil Mayers p.mayers at imperial.ac.uk
Mon Aug 28 13:49:36 CEST 2006


Ami Schieber wrote:
>  passwd MyGroup {
>                 filename = /etc/MyGroup
>                 format = "~Group-Name:::*,User-Name"
>                 hashsize = 50
>                 ignoreislike = yes
>                 allowmultiplekeys = yes
> 
> My /etc/MyGroup file :
> 
> FIGrp:::*,Ami
> FIGrp:::*,John

No. The "," prefixing the key in the format means that more than one 
value exists in that field, separated by commas, like the /etc/group 
file. The man page is quite specific. Your file would need to read:

FIGrp:::Ami,John

The "man rlm_passwd" docs are pretty specific about that example:

"""Parse  a file similar to the /etc/group file."""

If you're generating the file yourself, you can use a simpler format:

passwd mygroup {
   filename = /etc/mygroup
   format = "~Group-Name:*User-Name"
   hashsize = 50
   allowmultiplekeys = yes
}

...ands

group:user1
group:user2
othergroup:user3



More information about the Freeradius-Users mailing list