(RADIATOR) <AuthBy ACE> and Windows groups

Mike McCauley mikem at open.com.au
Fri Feb 11 20:42:07 CST 2005


Hello Ken,


On Saturday 12 February 2005 03:21, Kawakubo, Ken wrote:
> All,
>
> I am evaluating RSA SecurID. I am starting with
> authentication/authorization for access to Cisco switches and routers using
> SecurID. Currently, we are using <AuthBy LSA> with Windows group to give
> either privilege 15 or 1 depending on group membership. I would like to
> replicate the same with <AuthBy ACE>. But I found that <AuthBy ACE> does
> not support Windows groups. Is there any way to use Windows groups to
> interact with <AuthBy ACE>?

I havent tried this, but you could chain AuthBy NT with your AuthBy ACE, and 
set up the AuthBy NT to use groups but with NoCheckPassword.

Cheers.

>
> Ken Kawakubo
> FHCRC
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list