Re: Limit access of a SSID to a certain LDAP group

2009-01-15 Thread Hans-Peter Fuchs
Hello, look in auth-detail here you see the requests from your nas. Here is one request from our Cisco-Wlc (wism): Thu Jan 15 06:01:06 2009 Packet-Type = Access-Request User-Name = gschwarz Calling-Station-Id = 00-1F-5B-D7-3D-53 Called-Station-Id =

Limit access of a SSID to a certain LDAP group

2009-01-14 Thread qrt
Hello, Maybe I'm just too stupid to figure this one out, but I have been googling around for several days trying to find a solution... I am running freeradius on Mac OS X Server. I have a Cisco WLC runnning several APs with multiple SSIDs. Everything is working fine, except: I have not

Re: Limit access of a SSID to a certain LDAP group

2009-01-14 Thread tnt
I need to have different WLANs for different Users who are in LDAP groups. The user of group A should be able to use WLAN A but not WLAN B and so on. How on earth do I configure this? Where is SSID in the request? Called-Station-Id? NAS-Identifier? DEFAULT Ldap-Group == whatever, regex check

Re: Limit access of a SSID to a certain LDAP group

2009-01-14 Thread qrt
Thanks. I really apprecitate your help. Even though I understand what you are saying, I have no idea where to start looking for the SSID. As far as I can tell, the SSID is not in the request and neither in the NAS-Identifier. A typical log entry looks like this: Wed Jan 14 13:03:20

Re: Limit access of a SSID to a certain LDAP group

2009-01-14 Thread tnt
Even though I understand what you are saying, I have no idea where to start looking for the SSID. Access-Request packet. Do radiusd -X debug and request attributes will be displayed. As far as I can tell, the SSID is not in the request and neither in the NAS-Identifier. If it's not in the

Re: Limit access of a SSID to a certain LDAP group

2009-01-14 Thread Damjan
I need to have different WLANs for different Users who are in LDAP groups. The user of group A should be able to use WLAN A but not WLAN B and so on. How on earth do I configure this? Where is SSID in the request? Called-Station-Id? NAS-Identifier? DEFAULT Ldap-Group == whatever,

Re: Limit access of a SSID to a certain LDAP group

2009-01-14 Thread tnt
Interesting, I have a similar situation except that I want to authorize users from one SSID with ActiveDirectory, and from the other SSID with a local mysql. How would I do that? Freeradius doesn't care where is data coming from. You have to use groups. AD groups will also be in Ldap-Group