Problems with Cisco switch and authorization.

Alan DeKok aland at
Wed Jun 10 10:22:17 CEST 2009

Jeff Davis wrote:
> Sorry - I'm a n00b to this project.
> Trying to get OpenLDAP-based authentication working (well the auth DOES
> work) but cannot seem to get authorization working.
> Googling has so far failed me.  Perhaps someone on this list can clue me
> in...

  Have you run the server in debug mode as suggested in the FAQ, README,
"man" page, etc..?

> users file has the following:
> DEFAULT Service-Type == NAS-Prompt-User
>        Service-Type := NAS-Prompt-User,
>        Cisco-AVPair += "shell:priv-lvl=15"

  If those attributes are being sent back to the NAS, then fix the NAS
so that it follows the instructions sent by the RADIUS server.

  Alan DeKok.

More information about the Freeradius-Users mailing list