[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: freeradius 3.0.13 LDAP - reply custom Vendor Specific
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2017-11-30 17:19:00
Message-ID: F5D03106-345C-4AAE-80BC-536A842A1CEB () deployingradius ! com
[Download RAW message or body]

On Nov 30, 2017, at 12:08 PM, Paweł cit <pawelcit@gmail.com> wrote:
> 
> I try many possibilities but still no luck. In documentation:
> http://wiki.freeradius.org/modules/Rlm_ldap there is:
> in file raddb/mods-available/ldap put:
> 
> For Example:
> radiusReplyAttribute: Cisco-AVPair := "ip:addr-pool=dialin_pool"

  That means you put the Cisco-AVPair into LDAP...

> So I try radiusReplyAttribute: Attr-26 := "0x483d342c20493d34"  (with space
> between "bute: Attr" and without (both this gives error):
> update {
> control:Password-With-Header    += 'userPassword'
> #               control:NT-Password             := 'ntPassword'
> reply:Reply-Message             := 'radiusReplyMessage'
> radiusReplyAttribute: attr-26 := "0x483d342c20493d34"

  i.e. you didn't read the comments in the "ldap" module configuration which \
described what that section does, and how it works.

> I also tried:
> 
> post-auth {
> update {
> description := "Authenticated at %S"

  Is "description" a RADIUS attribute?

  No.

  Why do you think that adding random things to random configuration files will do \
what you want?  Do you believe that FreeRADIUS can read your mind?

> doest work either :(

  See the FAQ for "it doesn't work".

  The problem here goes deeper than just configuring FreeRADIUS.  You're lost, and \
are *not* reading the documentation.  Instead, you're just trying random things in \
the hope that they will magically work.

  Don't do that.  You need to *understand* things before editing them.  And the \
documentation *does* help with understanding.  I can't help you if you don't read it.

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]