Autz-type LDAP, Auth-Type MSCHAP possible ? (for vlan assignment)

tnt at kalik.net tnt at kalik.net
Wed Feb 18 15:59:51 CET 2009


>- User file new looks like :
>DEFAULT Ldap-Group == "cn=vlan1,ou=vlans,dc=test,dc=fr", Autz-Type := LDAP
>  Tunnel-Type = VLAN,
>  Tunnel-Medium-Type = IEEE-802,
>  Tunnel-Private-Group-Id = 2,
>  Reply-Message = "ok"
>

Remove that Autz-Type := Ldap

>- Into the sites-enabled/default & inner-tunnel :
>authorize {
>  preprocess
>  Autz-Type LDAP {
>    ldap
>  }

>From there as well.

>  eap {
>    ok = return
>  }
>  files
>  ldap
>  expiration
>  logintime
>}
>authenticate {
>  Auth-Type PAP {
>    pap
>  }
>  Auth-Type CHAP {
>    chap
>  }
>  Auth-Type MS-CHAP {
>    mschap
>  }
>  eap
>}
>
>In conclusion, the supplicant got an access-accept but nothing else (like
>the vlan #2 assignment).

Post the debug.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list