I'm using FreeRADIUS 1.0.5. to authenticate admin logins to a NetScreen5. I'm able to authenticate accounts just fine. Now I'd like to begin pulling administrative privileges from the Radius server, but I haven't figured out how to do that. I've referenced the dictionary.netscreen file in my clients.conf file, nastype = netscreen, but I'm embarrassed to say I can't figure out the format for including the dictionary attributes for a user in my users file.

I've tried various permutations like:

markt   Auth-Type := Local, User=Password == "testing"
        NS-Admin-Privilege = "Read-Only-Admin"

and:

markt   Auth-Type := Local, User=Password == "testing"
        Netscreen-NS-Admin-Privilege = "Read-Only-Admin"

Nothing's working.  Can some one show me the correct syntax?

Thank you,

Mark
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to