On Sun, Nov 10, 2002 at 11:33:44PM +0000, Gbenga wrote: > I have freeradius server running on Solaris 8, > authenticating off MySQL and all is working fine at > moment. But I want to implement Cisco AVPair > attributes on some of the users. Specifically the > users that belongs to the administrator group in my > user file. > > I read that I can implement Cisco AVPair and the users > will automatically be dropped into privileged mode > whenever they log into the router. The AV-Pair in > question is "cisco-avpair=shell-priv-lvl=15". > > My question is how do I add these to the user/group > profile in the user table(s). Some example of where > this will go in the sql table will be appreciated.
Just add to radgroupreply table attribute Cisco-AVPair withe desired value, eg: ip:addr-pool=inet etc. and have the op field set to +=, so you may have more than one cisco VSA. -- Best regards, Alexey Chetroi --- Smile... Tomorrow will be worse. (c) Murphy's law - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
