IP assignment based on AD group

[Rodrigo Abrantes Antunes]

Citando Alan DeKok <aland at deployingradius.com>:

> On Oct 30, 2024, at 12:03 PM, Rodrigo Abrantes Antunes  
> <rodrigoantunes at pelotas.ifsul.edu.br> wrote:
>>>  Are you running mikrotik equipment?  No?  Then it won't work.   
>>> That Wiki page is extremely clear on that.
>>
>> The wiki says the opposite actually.
>
>   So you don't understand how things work, but you think you know  
> better than people who do understand how things work?

Men, you said the wiki is clear in saying that this only work with mikrotik.

But then the wiki says this: "The example here is based on using a  
Mikrotik router client but the principles are the same as for any  
client."

This is clearly misleading, the wiki is clearly saying that this could  
work with other clients besides mikrotik. You should fix the wiki then.

I never said that that I know anything better that anyone, I only said  
what is said in the wiki. Fix that.


>> No, I'm talking about the case in the wiki: There is a wireless  
>> client that asks for ip to the dhcp server, the dhcpserver then  
>> sends an access request to freeradius which replies with the right  
>> IP for the wireless client.
>>
>> That case looks a lot like mine, thats why I didn't undestood why  
>> you said is impossible for radius to assign ip to clients with  
>> dhcp. I just wanted to know why.
>
>   I has been explained to you repeatedly:  pfsense doesn't have that  
> functionality.
>
>   At this point, I have to give up on this subject.  You've been  
> told repeatedly why it doesn't work.  You've been told that this  
> isn't a FreeRADIUS issue.
>
>   This subject is off topic for the FreeRADIUS list.  Any more  
> non-FreeRADIUS questions will result in you being removed from the  
> list.


In the first mail I said I want to control ip assignment based on ad  
groups with freeradius and then you said this is impossible no matter  
what I asked.

You could have said the cases where this is possible, you could have  
said: you can achieve exactly what you want with mikrotik dhcp or  
using freeradius as dhcp server or using vpn.

Currently I have pfsense as dhcp server, but if I can achieve my goal  
with freeradius dhcp I will switch to that.

You could have said that in the first email, you only said that  
freeradius can be a DHCP server, you never said that using freeradius  
as DHCP server I could achieve what I wanted.