[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: How to return dynamic vlan-id ?
From:       Bill Yuan <bycn82 () gmail ! com>
Date:       2022-09-14 1:58:40
Message-ID: CAC+JH2yrtRtbQdLcU6ty32v84GrM1P2u7UMYmqDpFRUNd6A4TQ () mail ! gmail ! com
[Download RAW message or body]

which means injecting the attribute into the reply message during the
authorization.

On Tue, 13 Sept 2022 at 22:29, Alan DeKok <aland@deployingradius.com> wrote:

> On Sep 13, 2022, at 3:22 AM, 网络时代 via Freeradius-Users <
> freeradius-users@lists.freeradius.org> wrote:
> > System version: freeradius-server-3.0.21
>
>   I'd suggest upgrading to 3.2.0.
>
> > I follow this article"
> https://wiki.freeradius.org/guide/Active-Directory-direct-via-winbind
> "Guide and verify the ad domain user successfully; Now I want to return
> different VLAN IDs for different domain user groups. Can I do this? Are
> there any related reference articles?
>
>   There are no articles which document every possible scenario.  Instead,
> there is documentation which describes how the server works.  It's up to
> you to put the pieces together.
>
>   If you want to assign VLAN ID based on groups, you should configure the
> "ldap" module, and do group checking there.  Then, do:
>
>
>         if (LDAP-Group == "group1") {
>                 // send VLAN 1 reply
>         }
>         elsif (LDAP-Group == "group2") {
>                 // send VLAN 2 reply
>
>  etc.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[prev in list] [next in list] [prev in thread] [next in thread]