2 # Mapping of RADIUS dictionary attributes to LDAP directory attributes
3 # to be used by LDAP authentication and authorization module (rlm_ldap)
6 # ItemType RADIUS-Attribute-Name ldapAttributeName [operator]
9 # ItemType = checkItem or replyItem
10 # RADIUS-Attribute-Name = attribute name in RADIUS dictionary
11 # ldapAttributeName = attribute name in LDAP schema
12 # operator = optional, and may not be present.
13 # If not present, defaults to "==" for checkItems,
14 # and "=" for replyItems.
15 # If present, the operator here should be one
16 # of the same operators as defined in the "users"3
17 # file ("man users", or "man 5 users").
18 # If an operator is present in the value of the
19 # LDAP entry (i.e. ":=foo"), then it over-rides
20 # both the default, and any operator given here.
22 # If $GENERIC$ is specified as RADIUS-Attribute-Name, the line specifies
23 # a LDAP attribute which can be used to store any RADIUS
24 # attribute/value-pair in LDAP directory.
26 # You should edit this file to suit it to your needs.
29 checkItem $GENERIC$ radiusCheckItem
30 replyItem $GENERIC$ radiusReplyItem
32 checkItem Auth-Type radiusAuthType
33 checkItem Simultaneous-Use radiusSimultaneousUse
34 checkItem Called-Station-Id radiusCalledStationId
35 checkItem Calling-Station-Id radiusCallingStationId
36 checkItem LM-Password lmPassword
37 checkItem NT-Password ntPassword
38 checkItem LM-Password sambaLmPassword
39 checkItem NT-Password sambaNtPassword
40 checkItem LM-Password dBCSPwd
41 checkItem SMB-Account-CTRL-TEXT acctFlags
42 checkItem Expiration radiusExpiration
43 checkItem NAS-IP-Address radiusNASIpAddress
44 checkItem Password-With-Header userPassword
46 replyItem Service-Type radiusServiceType
47 replyItem Framed-Protocol radiusFramedProtocol
48 replyItem Framed-IP-Address radiusFramedIPAddress
49 replyItem Framed-IP-Netmask radiusFramedIPNetmask
50 replyItem Framed-Route radiusFramedRoute
51 replyItem Framed-Routing radiusFramedRouting
52 replyItem Filter-Id radiusFilterId
53 replyItem Framed-MTU radiusFramedMTU
54 replyItem Framed-Compression radiusFramedCompression
55 replyItem Login-IP-Host radiusLoginIPHost
56 replyItem Login-Service radiusLoginService
57 replyItem Login-TCP-Port radiusLoginTCPPort
58 replyItem Callback-Number radiusCallbackNumber
59 replyItem Callback-Id radiusCallbackId
60 replyItem Framed-IPX-Network radiusFramedIPXNetwork
61 replyItem Class radiusClass
62 replyItem Session-Timeout radiusSessionTimeout
63 replyItem Idle-Timeout radiusIdleTimeout
64 replyItem Termination-Action radiusTerminationAction
65 replyItem Login-LAT-Service radiusLoginLATService
66 replyItem Login-LAT-Node radiusLoginLATNode
67 replyItem Login-LAT-Group radiusLoginLATGroup
68 replyItem Framed-AppleTalk-Link radiusFramedAppleTalkLink
69 replyItem Framed-AppleTalk-Network radiusFramedAppleTalkNetwork
70 replyItem Framed-AppleTalk-Zone radiusFramedAppleTalkZone
71 replyItem Port-Limit radiusPortLimit
72 replyItem Login-LAT-Port radiusLoginLATPort
73 replyItem Reply-Message radiusReplyMessage
74 replyItem Tunnel-Type radiusTunnelType
75 replyItem Tunnel-Medium-Type radiusTunnelMediumType
76 replyItem Tunnel-Private-Group-Id radiusTunnelPrivateGroupId