User /etc/shadow for Authentication

Norman Zhang norman.zhang at gmail.com
Fri Apr 27 00:37:56 CEST 2007


Norman Zhang wrote:
> Thanks. I edited users with the following entries
> 
> DEFAULT	Auth-Type = System
> 	Fall-Through = 1,
> 	cisco-avpair = "shell:priv-lvl=1",
> 	Service-Type = Administrative-User
> 
> DEFAULT Group == user-ro
> 	cisco-avpair := "shell:priv-lvl=7"
> 
> DEFAULT Group == user-rw
> 	cisco-avpair := "shell:priv-lvl=15"
> 
> but all users still get privilege level 15 access. Something wrong with 
> my config?

Found it. Service-Type should = NAS-Prompt-User.

Norman




More information about the Freeradius-Users mailing list