Hello FreeRadius users
I'm trying to get some group stuff working in freeradius
I want to check a group file for witch group a user is member off, and
after that send specific commands back to the radius client, on behalf
of witch group the client is a member of.
I can't get freeradius to do the correct check on my Group variable in
my users file, and I can't figure out what I'm missig or what I'm doing
wrong.
I have done the following
Added my group file to the passwd module
passwd groups {
filename = /etc/freeradius/radius-groups
format = "Group:::*,User-Name"
hashsize = 0
delimiter = :
ignorenislike = yes
allowmultiplekeys = yes
}
My group file looks like this
wcs-superadmin:x:1:admin
wcs-monitors:x:2:jmd
I have done the following in my users file to send the specific data
back to the radius client where my check relies on what the Group
variable contains.
DEFAULT NAS-IP-Address == 172.31.254.4, Group ==
"wcs-superadmin"
Cisco-AVPair += 'Wireless-WCS:role0=SuperUsers',
Cisco-AVPair += 'Wireless-WCS:task0=Users and Groups',
Cisco-AVPair += 'Wireless-WCS:task1=Audit Trails'
DEFAULT NAS-IP-Address == 172.31.254.4, Group == "wcs-monitors"
Cisco-AVPair += 'Wireless-WCS:task0=Users and Groups',
Cisco-AVPair += 'Wireless-WCS:task1=Audit Trails'
When I run a debug I get the following information
rad_recv: Access-Request packet from host 127.0.0.1 port 33646, id=62,
length=55
User-Name = "jmd"
User-Password = "password"
NAS-IP-Address = 172.31.254.4
NAS-Port = 0
Thu Jul 15 09:09:10 2010 : Info: +- entering group authorize {...}
Thu Jul 15 09:09:10 2010 : Info: ++[preprocess] returns ok
Thu Jul 15 09:09:10 2010 : Info: [kmdov3] Added crypt-Password:
'crpyt-password' to config_items
Thu Jul 15 09:09:10 2010 : Info: ++[kmdov3] returns ok
Thu Jul 15 09:09:10 2010 : Info: [groups] Added Group: 'wcs-monitors' to
config_items
Thu Jul 15 09:09:10 2010 : Info: ++[groups] returns ok
Thu Jul 15 09:09:10 2010 : Info: ++[chap] returns noop
Thu Jul 15 09:09:10 2010 : Info: ++[mschap] returns noop
Thu Jul 15 09:09:10 2010 : Info: [suffix] No '@' in User-Name = "jmd",
looking up realm NULL
Thu Jul 15 09:09:10 2010 : Info: [suffix] No such realm "NULL"
Thu Jul 15 09:09:10 2010 : Info: ++[suffix] returns noop
Thu Jul 15 09:09:10 2010 : Info: [eap] No EAP-Message, not doing EAP
Thu Jul 15 09:09:10 2010 : Info: ++[eap] returns noop
Thu Jul 15 09:09:10 2010 : Info: ++[files] returns noop
Thu Jul 15 09:09:10 2010 : Info: ++[expiration] returns noop
Thu Jul 15 09:09:10 2010 : Info: ++[logintime] returns noop
Thu Jul 15 09:09:10 2010 : Info: ++[pap] returns updated
Thu Jul 15 09:09:10 2010 : Info: Found Auth-Type = PAP
Thu Jul 15 09:09:10 2010 : Info: +- entering group PAP {...}
Thu Jul 15 09:09:10 2010 : Info: [pap] login attempt with password
"password"
Thu Jul 15 09:09:10 2010 : Info: [pap] Using CRYPT encryption.
Thu Jul 15 09:09:10 2010 : Info: [pap] User authenticated successfully
Thu Jul 15 09:09:10 2010 : Info: ++[pap] returns ok
Thu Jul 15 09:09:10 2010 : Info: +- entering group post-auth {...}
Thu Jul 15 09:09:10 2010 : Info: ++[exec] returns noop
Sending Access-Accept of id 62 to 127.0.0.1 port 33646
Thu Jul 15 09:09:10 2010 : Info: Finished request 1.
As you can see the Group: variable is set to 'wcs-monitors' witch is the
group jmd is member off. But i never sends the correct data back from
the users file. Howto do that ?
Best regards
Jan Madsen
________________________________________________________________________
__________________
KMD A/S, Lautrupparken 40-42, DK-2750 Ballerup, CVR-nr. 26911745
KMD er medlem af IT-Branchen og Dansk Erhverv samt anmeldt til
Datatilsynet som edb-servicevirksomhed. KMD er certificeret i henhold
til ISO 9001:2000, med Dansk Standard som certificerende organ og er
desuden Microsoft Gold Certified Partner og Certificeret SAP Hosting
Center.
www.kmd.dk www.kundenet.kmd.dk www.organisator.dk
www.kmdinternational.com
Hvis du har modtaget denne e-mail ved en fejl, bedes du venligst give
mig besked herom og slette den.
If you received this e-mail by mistake, please notify me and delete it.
Thank you.
________________________________________________________________________
__________________
KMD A/S, Lautrupparken 40-42, DK-2750 Ballerup, CVR-nr. 26911745
KMD er medlem af IT-Branchen og Dansk Erhverv samt anmeldt til
Datatilsynet som edb-servicevirksomhed. KMD er certificeret i henhold
til ISO 9001:2000, med Dansk Standard som certificerende organ og er
desuden Microsoft Gold Certified Partner og Certificeret SAP Hosting
Center.
www.kmd.dk www.kundenet.kmd.dk www.organisator.dk
www.kmdinternational.com
Hvis du har modtaget denne e-mail ved en fejl, bedes du venligst give
mig besked herom og slette den.
If you received this e-mail by mistake, please notify me and delete it.
Thank you.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
