This is a discussion on FreeRADIUS LDAP Attribute Mapping Problem within the FreeRADIUS Users forums, part of the Networking and Network Related category; Hello. Our setup is as follows: We have a dialup system and a wireless system that we use with RADIUS. ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hello. Our setup is as follows:
We have a dialup system and a wireless system that we use with RADIUS. We authenticate with an Active Directory system. Our dialup NAS talks directly with FreeRADIUS and uses MS-CHAP authentication (using ntlm_auth.) With our wireless, we are setting up PEAP so that we can have encrypted wireless. Our wireless system has control appliances called bluesockets that the wireless users log into which controls access. We are setting up our access points to send RADIUS packets to the Bluesocket device which proxies it to our RADIUS server. We have the actual authentication (ntlm_auth) working. We want to send the value of the ldap attribute "homemdb" in an attribute I created called "User-Type" back to the BlueSocket. It can use that attribute to determine the priority of the person's connection based on whether the person is a student, guest, or faculty/staff member. homemdb contains the DN of the exchange store the person's mailbox is in. I added replyItem User-Type homemdb to the ldap.attrmap file. A typical value of the homemdb attribute is: CN=Mailbox Store(A-G),CN=FacultyStaff(A-M),CN=InformationStore,CN=BEE X1,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=Westf ield State College,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=ads, DC=wsc,DC=ma,DC=edu (The Bluesocket has a feature where it will find the "FacultyStaff" in there) however the attribute is only getting "CN" from it ( Take it its because of the equal sign.) What do I need it to do to get that whole DN? |