raddb/ldap.attrmap

   1 #
   2 # Mapping of RADIUS dictionary attributes to LDAP directory attributes
   3 # to be used by LDAP authentication and authorization module (rlm_ldap)
   4 #
   5 # Format:
   6 #   ItemType    RADIUS-Attribute-Name           ldapAttributeName  [operator]
   7 #
   8 # Where:
   9 #   ItemType              = checkItem or replyItem
  10 #   RADIUS-Attribute-Name = attribute name in RADIUS dictionary
  11 #   ldapAttributeName     = attribute name in LDAP schema
  12 #   operator              = optional, and may not be present.
  13 #                           If not present, defaults to "==" for checkItems,
  14 #                           and "=" for replyItems.
  15 #                           If present, the operator here should be one
  16 #                           of the same operators as defined in the "users"3
  17 #                           file ("man users", or "man 5 users").
  18 #                           If an operator is present in the value of the
  19 #                           LDAP entry (i.e. ":=foo"), then it over-rides
  20 #                           both the default, and any operator given here.
  21 #
  22 # If $GENERIC$ is specified as RADIUS-Attribute-Name, the line specifies
  23 # a LDAP attribute which can be used to store any RADIUS
  24 # attribute/value-pair in LDAP directory.
  25 #
  26 # You should edit this file to suit it to your needs.
  27 #
  28
  29 checkItem       $GENERIC$                       radiusCheckItem
  30 replyItem       $GENERIC$                       radiusReplyItem
  31
  32 checkItem       Auth-Type                       radiusAuthType
  33 checkItem       Simultaneous-Use                radiusSimultaneousUse
  34 checkItem       Called-Station-Id               radiusCalledStationId
  35 checkItem       Calling-Station-Id              radiusCallingStationId
  36 checkItem       LM-Password                     lmPassword
  37 checkItem       NT-Password                     ntPassword
  38 checkItem       LM-Password                     sambaLmPassword
  39 checkItem       NT-Password                     sambaNtPassword
  40 checkItem       LM-Password                     dBCSPwd
  41 checkItem       SMB-Account-CTRL-TEXT           acctFlags
  42 checkItem       Expiration                      radiusExpiration
  43 checkItem       NAS-IP-Address                  radiusNASIpAddress
  44
  45 replyItem       Service-Type                    radiusServiceType
  46 replyItem       Framed-Protocol                 radiusFramedProtocol
  47 replyItem       Framed-IP-Address               radiusFramedIPAddress
  48 replyItem       Framed-IP-Netmask               radiusFramedIPNetmask
  49 replyItem       Framed-Route                    radiusFramedRoute
  50 replyItem       Framed-Routing                  radiusFramedRouting
  51 replyItem       Filter-Id                       radiusFilterId
  52 replyItem       Framed-MTU                      radiusFramedMTU
  53 replyItem       Framed-Compression              radiusFramedCompression
  54 replyItem       Login-IP-Host                   radiusLoginIPHost
  55 replyItem       Login-Service                   radiusLoginService
  56 replyItem       Login-TCP-Port                  radiusLoginTCPPort
  57 replyItem       Callback-Number                 radiusCallbackNumber
  58 replyItem       Callback-Id                     radiusCallbackId
  59 replyItem       Framed-IPX-Network              radiusFramedIPXNetwork
  60 replyItem       Class                           radiusClass
  61 replyItem       Session-Timeout                 radiusSessionTimeout
  62 replyItem       Idle-Timeout                    radiusIdleTimeout
  63 replyItem       Termination-Action              radiusTerminationAction
  64 replyItem       Login-LAT-Service               radiusLoginLATService
  65 replyItem       Login-LAT-Node                  radiusLoginLATNode
  66 replyItem       Login-LAT-Group                 radiusLoginLATGroup
  67 replyItem       Framed-AppleTalk-Link           radiusFramedAppleTalkLink
  68 replyItem       Framed-AppleTalk-Network        radiusFramedAppleTalkNetwork
  69 replyItem       Framed-AppleTalk-Zone           radiusFramedAppleTalkZone
  70 replyItem       Port-Limit                      radiusPortLimit
  71 replyItem       Login-LAT-Port                  radiusLoginLATPort
  72 replyItem       Reply-Message                   radiusReplyMessage
  73 replyItem       Tunnel-Type                     radiusTunnelType
  74 replyItem       Tunnel-Medium-Type              radiusTunnelMediumType
  75 replyItem       Tunnel-Private-Group-Id         radiusTunnelPrivateGroupId