Bluehost.com Web Hosting $6.95

FreeRADIUS LDAP Attribute Mapping Problem

This is a discussion on FreeRADIUS LDAP Attribute Mapping Problem within the FreeRADIUS Users forums, part of the Networking and Network Related category; Hello. Our setup is as follows: We have a dialup system and a wireless system that we use with RADIUS. ...


Go Back   Usenet Forums > Networking and Network Related > FreeRADIUS Users

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-18-2007
tom@algolx.net
 
Posts: n/a
Default FreeRADIUS LDAP Attribute Mapping Problem

Hello. Our setup is as follows:

We have a dialup system and a wireless system that we use with RADIUS.
We authenticate with an Active Directory system. Our dialup NAS talks
directly with FreeRADIUS and uses MS-CHAP authentication (using
ntlm_auth.) With our wireless, we are setting up PEAP so that we can
have encrypted wireless. Our wireless system has control appliances
called bluesockets that the wireless users log into which controls
access. We are setting up our access points to send RADIUS packets to
the Bluesocket device which proxies it to our RADIUS server. We have
the actual authentication (ntlm_auth) working. We want to send the
value of the ldap attribute "homemdb" in an attribute I created called
"User-Type" back to the BlueSocket. It can use that attribute to
determine the priority of the person's connection based on whether the
person is a student, guest, or faculty/staff member. homemdb contains
the DN of the exchange store the person's mailbox is in. I added

replyItem User-Type homemdb

to the ldap.attrmap file. A typical value of the homemdb attribute is:

CN=Mailbox Store(A-G),CN=FacultyStaff(A-M),CN=InformationStore,CN=BEE
X1,CN=Servers,CN=First Administrative Group,CN=Administrative
Groups,CN=Westf
ield State College,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=ads,
DC=wsc,DC=ma,DC=edu
(The Bluesocket has a feature where it will find the "FacultyStaff" in
there)

however the attribute is only getting "CN" from it ( Take it its
because of the equal sign.) What do I need it to do to get that whole
DN?

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 09:43 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0