AD integration

Phil Mayers p.mayers at imperial.ac.uk
Sat Oct 29 23:13:37 CEST 2011


On 10/29/2011 08:17 PM, Whitlow, Michael wrote:
> Jake,
>
> Thanks for the reply. Much appreciated.
>
> I have worked on this more and from what I have learned I need to
> configure the "users" file properly. I have a feeling that if I could
> figure out exactly what I need to put in there I would be in
> business. I just can't seem to find exactly what I need to do in
> there to identify AD groups and provide the right IEEE tags to the
> client.

Something like:

DEFAULT	Ldap-Group == STAFF
	Tunnel-Type := VLAN,
	Tunnel-Medium-Type = IEEE-802,
	Tunnel-Private-Group-Id := 123,
	Fall-Through := No

DEFAULT	Ldap-Group == GUEST
	Tunnel-Type := VLAN,
	Tunnel-Medium-Type = IEEE-802,
	Tunnel-Private-Group-Id := 456,
	Fall-Through := No

...but of course you need to have configured "modules/ldap" correctly 
for this to work.



More information about the Freeradius-Users mailing list