Radius reply multivalue VSA question.
Eric Martell
workoutexcite at yahoo.com
Wed Oct 8 18:09:46 CEST 2008
Hi,
We are defining custom VSA's for our company. We have ldap configured in freeradius which returns back the VSA's.
I defined custom VSA in
$freeradius/share/freeradius/dictionary.abc
ATTRIBUTE rEntitlements 113 string
entitlements is multivalue attribute (vARRAY) in LDAP.
In the ldap.attrmap it is defined as
replyItem rEntitlements entitlements ==
So after the successful authentication, I am getting the rEntitlements back as
Sending Access-Accept of id 50 to 69.74.69.31 port 1814
Session-Timeout = 7200
rEntitlements == "ADMALL"
rEntitlements == "STORE"
rEntitlements == "WEPG"
rEntitlements == "WADM"
rEntitlements == "SDNLD"
rEntitlements == "WIFILOC1"
BUT I am looking for ONLY WIFILOC1 for the NAS. NAS will redirect if WIFILOC1 exists.
Can I do regex in the rEntitlements so freeradius ONLY returns
rEntitlements = "WIFILOC1" and ignore the rest?
Please let me know.
Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20081008/1ccc8872/attachment.html>
More information about the Freeradius-Users
mailing list