(RADIATOR) help needed (privlege base athorization for cisco

"Díaz Pérez, Jesús" jesus.diaz at ono.es
Thu Jun 13 07:59:28 CDT 2002


Hi All,

i use:

Service-Type = Login-User,
cisco-avpair = "shell:priv-lvl=<desired level>"

and it works fine for me.

regards


> -----Mensaje original-----
> De:	kaushalender shekhawat [SMTP:itsme_koshu at yahoo.com]
> Enviado el:	jueves 13 de junio de 2002 14:02
> Para:	radiator at open.com.au
> Asunto:	(RADIATOR) help needed (privlege base athorization for cisco
> 
> Hello group,
> 
> I am new to radiator radius.I am trying to give
> privilege to user after passing authentication for
> user.do for it  for different privilege level for
> different  user.in cisco i have done this 
> 
> aaa new-user
> aaa authentication login default local group radius
> aaa authorization exec default local group radius
> 
> I have tried  cisco avpair=shell:priv-lvl=15 in reply
> attribute but 
> 
> on telneting it is saying authorization failed
> on debug radius and authorization it saying 
> 
> tty67 AAA/AUTHOR/EXEC (4183374475): Method=radius
> (radius)
> *Mar  6 04:34:41.293 GMT: RADIUS: Unknown service-type
> in shell-author: type=0
> *Mar  6 04:34:41.293 GMT: RADIUS: no appropriate
> authorization type for user.
> *Mar  6 04:34:41.297 GMT: AAA/AUTHOR (4183374475):
> Post authorization status = FAIL
> *Mar  6 04:34:41.297 GMT: AAA/AUTHOR/EXEC:
> Authorization FAILED
> 
> Now what else i have to do in radiator 
> 
> Thanx 
> 
> kaushalender
> 
> Plz help me
> Thanx
> Kaushalender
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list