RE: [Help-gnu-radius] Experiences with cisco VPN 3000

[Gerald]

On Wed, 19 Nov 2003, Dan Didier wrote:

> How will it handle groups?

> If a user is assigned to a group I am assuming it will be through the
> radius server, correct?

>From Cisco:
Authenticating Groups and Users Externally through RADIUS

- External Groups can return Cisco/Altiga attributes if the RADIUS server
  supports Vendor Specific Attributes (VSAs).

# gnu-radius does support VSAs.

- Any Cisco/Altiga attributes NOT returned by RADIUS default to the values
  in the Base Group.

- If the RADIUS server does NOT support VSAs, then ALL attributes default
  to the Base Group attributes.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_tech_note09186a00800948c1.shtml

also of use since you'll probably need to write a dictionary file:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_tech_note09186a0080094e96.shtml

Gerald