raddb/ldap.attrmap

   1 #
   2 # Mapping of RADIUS dictionary attributes to LDAP directory attributes
   3 # to be used by LDAP authentication and authorization module (rlm_ldap)
   4 #
   5 # Format:
   6 #   ItemType    RADIUS-Attribute-Name           ldapAttributeName  [operator]
   7 #
   8 # Where:
   9 #   ItemType              = checkItem or replyItem
  10 #   RADIUS-Attribute-Name = attribute name in RADIUS dictionary
  11 #   ldapAttributeName     = attribute name in LDAP schema
  12 #   operator              = optional, and may not be present.
  13 #                           If not present, defaults to "==" for checkItems,
  14 #                           and "=" for replyItems.
  15 #                           If present, the operator here should be one
  16 #                           of the same operators as defined in the "users"3
  17 #                           file ("man users", or "man 5 users").
  18 #                           If an operator is present in the value of the
  19 #                           LDAP entry (i.e. ":=foo"), then it over-rides
  20 #                           both the default, and any operator given here.
  21 #
  22 # If $GENERIC$ is specified as RADIUS-Attribute-Name, the line specifies
  23 # a LDAP attribute which can be used to store any RADIUS
  24 # attribute/value-pair in LDAP directory.
  25 #
  26 # You should edit this file to suit it to your needs.
  27 #
  28
  29 checkItem       $GENERIC$                       radiusCheckItem
  30 replyItem       $GENERIC$                       radiusReplyItem
  31
  32 checkItem       Auth-Type                       radiusAuthType
  33 checkItem       Simultaneous-Use                radiusSimultaneousUse
  34 checkItem       Called-Station-Id               radiusCalledStationId
  35 checkItem       Calling-Station-Id              radiusCallingStationId
  36 checkItem       LM-Password                     lmPassword
  37 checkItem       NT-Password                     ntPassword
  38 checkItem       LM-Password                     sambaLmPassword
  39 checkItem       NT-Password                     sambaNtPassword
  40 checkItem       LM-Password                     dBCSPwd
  41 checkitem       Password-With-Header            userPassword
  42 checkItem       SMB-Account-CTRL-TEXT           acctFlags
  43 checkItem       Expiration                      radiusExpiration
  44 checkItem       NAS-IP-Address                  radiusNASIpAddress
  45 checkItem       Password-With-Header            userPassword
  46
  47 replyItem       Service-Type                    radiusServiceType
  48 replyItem       Framed-Protocol                 radiusFramedProtocol
  49 replyItem       Framed-IP-Address               radiusFramedIPAddress
  50 replyItem       Framed-IP-Netmask               radiusFramedIPNetmask
  51 replyItem       Framed-Route                    radiusFramedRoute
  52 replyItem       Framed-Routing                  radiusFramedRouting
  53 replyItem       Filter-Id                       radiusFilterId
  54 replyItem       Framed-MTU                      radiusFramedMTU
  55 replyItem       Framed-Compression              radiusFramedCompression
  56 replyItem       Login-IP-Host                   radiusLoginIPHost
  57 replyItem       Login-Service                   radiusLoginService
  58 replyItem       Login-TCP-Port                  radiusLoginTCPPort
  59 replyItem       Callback-Number                 radiusCallbackNumber
  60 replyItem       Callback-Id                     radiusCallbackId
  61 replyItem       Framed-IPX-Network              radiusFramedIPXNetwork
  62 replyItem       Class                           radiusClass
  63 replyItem       Session-Timeout                 radiusSessionTimeout
  64 replyItem       Idle-Timeout                    radiusIdleTimeout
  65 replyItem       Termination-Action              radiusTerminationAction
  66 replyItem       Login-LAT-Service               radiusLoginLATService
  67 replyItem       Login-LAT-Node                  radiusLoginLATNode
  68 replyItem       Login-LAT-Group                 radiusLoginLATGroup
  69 replyItem       Framed-AppleTalk-Link           radiusFramedAppleTalkLink
  70 replyItem       Framed-AppleTalk-Network        radiusFramedAppleTalkNetwork
  71 replyItem       Framed-AppleTalk-Zone           radiusFramedAppleTalkZone
  72 replyItem       Port-Limit                      radiusPortLimit
  73 replyItem       Login-LAT-Port                  radiusLoginLATPort
  74 replyItem       Reply-Message                   radiusReplyMessage
  75 replyItem       Tunnel-Type                     radiusTunnelType
  76 replyItem       Tunnel-Medium-Type              radiusTunnelMediumType
  77 replyItem       Tunnel-Private-Group-Id         radiusTunnelPrivateGroupId