[RADIATOR] Is this config possible?

[Johnson, Neil M]

Can I work around this just by doing the following in my users file?

.
.
.
# Allow non-admin access to Wireless Controller
DEFAULT Auth-Type = System, Client-Identifier = WirelessController, Group = WirelessUsers
	# Return NON enabled privileges attributes

# Allow admin access to Wireless Controller
DEFAULT Auth-Type = System, Client-Identifier = WirelessController, Group = WirelessAdmins
	# Return enabled privileges attributes
	AddToReply Session-Timeout=0,Callback-Number=admin
.
.
.
# Last entry reject
DEFAULT Auth-Type = “Reject:Not Found”


-- 
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
E-Mail: neil-johnson at uiowa.edu



> On Oct 30, 2015, at 6:37 AM, Tuure Vartiainen <vartiait at open.com.au> wrote:
> 
> Hi,
> 
>> On 29 Oct 2015, at 20:18, Johnson, Neil M <neil-johnson at uiowa.edu> wrote:
>> 
>> Will the following work?
>> 
> 
> yes, it will work with an exception of group handling, you should make sure 
> that groups used in users file can also be found in /etc/group. When 
> using /etc/shadow which does not include GIDs for users, the current code 
> allows also authenticated users when comparing against non-existing group.
> 
> We’ll fix the later in a following release.
> 
> 
> BR
> -- 
> Tuure Vartiainen <vartiait at open.com.au>
> 
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
> DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
> NetWare etc.
>