Re: LDAP Group assign to vlan after AD user authentication

2012-01-24 Thread NdK
Il 24/01/2012 08:48, Arran Cudbard-Bell ha scritto: But how do I set Tunnel-Private-Group-Id from an exec-ed script? Just execute it using a backticks expansion, store the result in Tmp-String-0 then use regular expression matches over the result to figure out whether it contains a certain

Re: LDAP Group assign to vlan after AD user authentication

2012-01-24 Thread Arnaud Loonstra
On 01/24/2012 08:48 AM, Arran Cudbard-Bell wrote: [snip] IIRC the LDAP Module is actually smart enough to figure out whether you passed in a DN as a group or just a groupname, so in theory if you have the filters and search depth set correctly you can just use Ldap-Group == mygroup. -Arran

Re: LDAP Group assign to vlan after AD user authentication

2012-01-24 Thread Arran Cudbard-Bell
On 24 Jan 2012, at 09:05, NdK wrote: Il 24/01/2012 08:48, Arran Cudbard-Bell ha scritto: But how do I set Tunnel-Private-Group-Id from an exec-ed script? Just execute it using a backticks expansion, store the result in Tmp-String-0 then use regular expression matches over the result to

Re: LDAP Group assign to vlan after AD user authentication

2012-01-23 Thread Arnaud Loonstra
On 01/19/2012 11:25 AM, James wrote: Hi, I've successfully set up a radius server to support 802.1x authentication using peap mschapv2 and samba to authenticate users against AD. To do this I followed configuration on the freeradius.org website and the AD integration howto on

Re: LDAP Group assign to vlan after AD user authentication

2012-01-23 Thread NdK
Il 23/01/2012 14:48, Arnaud Loonstra ha scritto: But I reckon you could also do something like that in post-auth section if (Ldap-Group == cn=mygroup,ou=groups,o=radius) { update reply { Tunnel-type = VLAN Tunnel-medium-type = IEEE-802 Tunnel-Private-Group-Id = 1 } } I

Re: LDAP Group assign to vlan after AD user authentication

2012-01-23 Thread Arran Cudbard-Bell
On 24 Jan 2012, at 08:23, NdK wrote: Il 23/01/2012 14:48, Arnaud Loonstra ha scritto: But I reckon you could also do something like that in post-auth section if (Ldap-Group == cn=mygroup,ou=groups,o=radius) { update reply { Tunnel-type = VLAN Tunnel-medium-type = IEEE-802

LDAP Group assign to vlan after AD user authentication

2012-01-19 Thread James
Hi, I've successfully set up a radius server to support 802.1x authentication using peap mschapv2 and samba to authenticate users against AD. To do this I followed configuration on the freeradius.org website and the AD integration howto on deployingradius.com, thank you very much for writing