PEAP authentication + LDAP attribute recovery

2007-05-14 Thread Manuel Sánchez Cuenca
Hi all,

It is possible to configure freeradius to authenticate users using PEAP
and then, for authenticated users, return some RADIUS attributes
recovered from a LDAP server, such as Session-Timeout or
Framed-IP-Address?. And in that case, how can I configure it?

Thanks in adavance

-- 
-
Manuel Sanchez Cuenca
Departamento de Ingenieria de la Informacion y las Comunicaciones
Facultad de Informatica. Universidad de Murcia
Campus de Espinardo - 30080 Murcia (SPAIN)
Tel.: +34-968-364644Fax: +34-968-364151
email: [EMAIL PROTECTED]  |  [EMAIL PROTECTED]
url: http://libra.inf.um.es/~lolo
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: PEAP authentication + LDAP attribute recovery

2007-05-14 Thread Kostas Kalevras
O/H Manuel Sánchez Cuenca έγραψε:
 Hi all,

 It is possible to configure freeradius to authenticate users using PEAP
 and then, for authenticated users, return some RADIUS attributes
 recovered from a LDAP server, such as Session-Timeout or
 Framed-IP-Address?. And in that case, how can I configure it?

 Thanks in adavance

   
Yes. PEAP has specific restrictions on the password though (it should be 
clear text or NT-Password). rlm_ldap (in the authorize section) will 
retrieve any radius attributes present in the user entries (as well as 
in some other profiles). Check the doc folder for the rlm_ldap 
documentation and for the radius ldap schema.

-- 
Kostas Kalevras - Network Operations Center
National Technical University of Athens
http://kkalev.wordpress.com

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html