AD group and Reply Attribute

ReZa Esfahani esfahanii.reza at gmail.com
Tue Feb 22 09:24:10 UTC 2022


Hello,
I have Microsoft Active Directory as a users database in my company. i
have 10 Different Group in my AD and i want to send  specific
attributes for each group to NAS, I also integrate my AD with
freeradius, but i don't know how to send these attribute to nas and i
dont know where i made mistake?

users file
.......................................
DEFAULT Ldap-Group == "CN=student,OU=IT,OU=FDM,DC=test,DC=com",
  Service-Type = Framed-User,
  Framed-Protocol = PPP,
  Tunnel-Medium-Type = 802 (includes all 802 media plus Ethernet
"canonical format"),
  Tunnel-Private-Group-ID = 15
  Tunnel-Type = Virtual Lans (VLAN)
...........................................................
mods-enabled > ldap module
..........................................................

ldap {

    server = 'active.test.com'
    identity = 'CN=std,OU=IT,OU=FDM,DC=test,DC=com'
    password = 1
    base_dn = 'dc=test,dc=com'
}
...........................................................................................
site-enabled > default
.........................................................
in authorize section  uncomment ldap


More information about the Freeradius-Users mailing list