I'm sure this is an easy issue to solve, but my simple brain can't seem to put
the pieces together. Any help would be greatly appreciated.
I'm trying to authorize a login into a Cisco switch with admin privileges.
Users:
DEFAULT = LDAP-Group == Radius-Users"
Reply-Message = "Welcome Message Test",
Cisco-AVPair = "shell:priv-lvl=15"
Note: I've tried many different combinations of attributes with no luck.
(Service-Type = Administrative-User, Service-Type = NAS-Prompt-User)
Output:
Sending Access-Accept of id 61 to 172.28.64.3 port 1645
Reply-Message = "Welcome Message Test"
Cisco-AVPair = "shell:priv-lvl=15"
The switch login successfully shows "Welcome Message Test," but still kicks
into user exec mode without applying the Cisco-AVPair = "shell:priv-lvl=15"
I noticed that there is a mapping for the Reply-Message found in ldap.attrmap,
but none for Cisco-AVPair. Is this why it's not working? If so, I have not been
able to find the correct syntax for adding it to ldap.attrmap.
Thanks in advance,
T. Brady
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
