SSH Logins to Cisco Switch. RADIUS/Active Directory

[Arran Cudbard-Bell]

On 28 Jan 2014, at 14:44, Luke Ramsden <lukermsdn at gmail.com> wrote:

> I've set up the LDAP bind how I think it should be done and it seems to be binding correctly.

Authorization is not Authentication.

You want something like:

authorize {
	if (User-Password) {
		update {
			control:Auth-Type := LDAP
		}
	}
}

authenticate {
	Auth-Type LDAP {
		ldap
	}
}

Where you list the module changes which operation it performs.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140128/5477da73/attachment.pgp>