On Tue, Jul 20, 2004 at 06:35:32AM -0500, Robert Banniza wrote: > This we have done. They mentioned that Unisphere-Init-CLI-Access-Level > should work as well as ERX-Cli-Initial-Access-Level or > Juniper-Initial-CLI-Access-Level. What I don't understand is how the > Juniper is able to parse the three (as they are different names) and > understand them. I do not have anything in ldap.attrmap that maps one to > the other.
It doesn't. The RADIUS server (FreeRADIUS, here) turns the names into numbers using the dictionary files, and sends the numbered attributes to the NAS. -- Paul "TBBle" Hampson, on an alternate email client. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

