Filter-Id = Enterasys:version=1:policy=
Please correct me If I am doing something wrong.
Thanks,
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/How-to-return-Filter-ID-attribute-value-for-the-users-in-Active-Directory-tp5155068p5158499.html
Sent from the FreeRadius
suggestme wrote:
I tried to return the value of Filter-ID as:
authorize {
...
ldap
if (distinguishedName =~ /^[^,]+,OU=([^,]+),/) {
What's distinguishedName ?
It's not a RADIUS attribute. Read man unlang, which explains how
the attributes variables work.
In my
:
http://freeradius.1045715.n5.nabble.com/How-to-return-Filter-ID-attribute-value-for-the-users-in-Active-Directory-tp5155068p5158770.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
suggestme wrote:
Still trying to become more familiar with attributes and learning.
In my understanding there are different attributes list as :request, reply,
control, proxy-request, proxy-reply, outer.request, outer.reply, etc.
As I said before, see man unlang. This is documented in
to different
users. Depending upon the Filter-ID attribute value returned by FreeRadius,
Enterasys switch decides what role can be assigned to the user. In my
understanding I know there is the way to achieve this goal if we have
Ldap-Group so that we can use as:
DEFAULT Ldap-Group == Staff
On 18/01/12 14:55, suggestme IT wrote:
DEFAULT Ldap-Group == Staff
Filter-ID := Enterasys:version=1:policy=staff,
Fall-Through = No
But, How to do same like this for the users in Active Directory; How to
return the Filter-ID attribute value if there is no group configured in
Active Directory
to NAS again.
Thanks,
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/How-to-return-Filter-ID-attribute-value-for-the-users-in-Active-Directory-tp5155068p5155212.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe
On 18/01/12 16:04, suggestme wrote:
There are different users under Staff, Administrators, Retirees, etc in
active directory as:
OU=Staff OU=Administrators
OU=Retirees
CN=users CN=users
CN=users
Ok, so you want
Hello all,
In 802.1x configuration, I need to use Vlan assignment on Enterasys switch
from Freeradius server, and Enterasys doesn't accept standarts attributes
like Tunnel-type etc...
Then I have to use Filter-Id attribute in users file:
Filter-ID = Enterasys:Version=1:policy=nameofpolicy
Have
[EMAIL PROTECTED] wrote:
Then I have to use Filter-Id attribute in users file:
Filter-ID = Enterasys:Version=1:policy=nameofpolicy
Have I a VALUE to add in a dictionnary file for ATTRIBUTE Filter-Id ??
No. Read the dictionaries. It's a string attribute.
Alan DeKok.
-
List info
10 matches
Mail list logo
