(RADIATOR) Re: Match Service type to AD Group

Hugh Irvine hugh at open.com.au
Fri Feb 11 08:13:14 CST 2005


Hello Lee -

What plaform are you running on? What AuthBy clause are you using?

Some AuthBy clauses support a "Group" check item and others allow you 
to configure additional check items.

You can also configure a separate Handler (if using Handlers):

<Handler Service-Type = Login-User>
	.....
</Handler>

regards

Hugh


On 11 Feb 2005, at 15:30, Lee Quince wrote:

> ** Received from 10.64.254.225 port 3220 ....
>
> Code:       Access-Request
>
> Identifier: 4
>
> Authentic:  <11>q<8>7<190><182><29><212>/]pyq<29><189><29>
>
> Attributes:
>
>             Service-Type = Login-User
>
>             NAS-Identifier = "ClarendonHouse.iycore.net"
>
>             User-Name = "lquince at iyonder.net"
>
>             CHAP-Challenge = 
> "g<135><135>[g<186><224><214>Gkz<200>q<128><141><17>"
>
>             CHAP-Password = 
> "<0>O<190>O_<19>M<212><7><190>h<133><203><220>uh<200>"
>
>             Calling-Station-Id = "10.64.252.146"
>
>             NAS-IP-Address = 10.64.254.225
>
>  
>
> How can I match the Service-Type against a specific group in Active 
> Directory.? Then generate a accept.
>
>  
>
> Regards
>
>  
>
> Lee
>

NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive 
(www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list