Roger Spencer wrote:
Well, I added a description to the RadiusProfile object. Still
can't
add it to a user, but I can to a group, which is probably what I want
anyway.
I suspect user error on my part. I'll go back to reading.
Roger Spencer wrote:
> Has anyone had any luck getting the FreeRadius LDAP extensions into DS?
>
> I've modified the RADIUS-LDAPv3.schema file that comes with
> FreeRadius (as of version 1.0.5) to what seems to match the format DS
> is expecting and placed it in the slapd config/schema directory as
> 75radius.ldif (see attached). When I restart slapd, the file loads
> fine and I see it in the schema. But when I try to add RadiusProfile
> to the Object class section of a user account (using the advanced
> settings), I get "Unknown error with naming attribute."
>
> Any ideas?
>
>------------------------------------------------------------------------
>
>
>
I am not an expert on FDS but I managed to convert the schema from
FreeRADIUS. I had to move the objectClass block from the end of the file
to the top and used the perl script to convert it. The result is
attached (am not sure if the name is correct or not)
--
Taymour A El Erian
System Division Manager
RHCE, LPIC, CCNA, MCSE, CNA
TE Data
E-mail: taymour.elerian(a)tedata.net
Web:
www.tedata.net
Tel: +(202)-4166600
Fax: +(202)-4166700
Ext: 1101
#
#********************************************************************
#
dn: cn=schema
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.1
NAME 'radiusArapFeatures'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.2
NAME 'radiusArapSecurity'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.3
NAME 'radiusArapZoneAccess'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.44
NAME 'radiusAuthType'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.4
NAME 'radiusCallbackId'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.5
NAME 'radiusCallbackNumber'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.6
NAME 'radiusCalledStationId'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.7
NAME 'radiusCallingStationId'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.8
NAME 'radiusClass'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.45
NAME 'radiusClientIPAddress'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.9
NAME 'radiusFilterId'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.10
NAME 'radiusFramedAppleTalkLink'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.11
NAME 'radiusFramedAppleTalkNetwork'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.12
NAME 'radiusFramedAppleTalkZone'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.13
NAME 'radiusFramedCompression'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.14
NAME 'radiusFramedIPAddress'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.15
NAME 'radiusFramedIPNetmask'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.16
NAME 'radiusFramedIPXNetwork'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.17
NAME 'radiusFramedMTU'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.18
NAME 'radiusFramedProtocol'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.19
NAME 'radiusFramedRoute'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.20
NAME 'radiusFramedRouting'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.46
NAME 'radiusGroupName'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.47
NAME 'radiusHint'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.48
NAME 'radiusHuntgroupName'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.21
NAME 'radiusIdleTimeout'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.22
NAME 'radiusLoginIPHost'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.23
NAME 'radiusLoginLATGroup'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.24
NAME 'radiusLoginLATNode'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.25
NAME 'radiusLoginLATPort'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.26
NAME 'radiusLoginLATService'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.27
NAME 'radiusLoginService'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.28
NAME 'radiusLoginTCPPort'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.29
NAME 'radiusPasswordRetry'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.30
NAME 'radiusPortLimit'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.49
NAME 'radiusProfileDn'
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.31
NAME 'radiusPrompt'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.50
NAME 'radiusProxyToRealm'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.51
NAME 'radiusReplicateToRealm'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.52
NAME 'radiusRealm'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.32
NAME 'radiusServiceType'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.33
NAME 'radiusSessionTimeout'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.34
NAME 'radiusTerminationAction'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.35
NAME 'radiusTunnelAssignmentId'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.36
NAME 'radiusTunnelMediumType'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.37
NAME 'radiusTunnelPassword'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.38
NAME 'radiusTunnelPreference'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.39
NAME 'radiusTunnelPrivateGroupId'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.40
NAME 'radiusTunnelServerEndpoint'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.41
NAME 'radiusTunnelType'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.42
NAME 'radiusVSA'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.43
NAME 'radiusTunnelClientEndpoint'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.53
NAME 'radiusSimultaneousUse'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.54
NAME 'radiusLoginTime'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.55
NAME 'radiusUserCategory'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.56
NAME 'radiusStripUserName'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.57
NAME 'dialupAccess'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.58
NAME 'radiusExpiration'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.59
NAME 'radiusCheckItem'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.60
NAME 'radiusReplyItem'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.61
NAME 'SuspensionDate'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
SINGLE-VALUE
)
#
#********************************************************************
#
attributeTypes: (
1.3.6.1.4.1.3317.4.3.1.62
NAME 'radiususerPassword'
EQUALITY octetStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128}
)
#
#********************************************************************
#
objectClasses: (
1.3.6.1.4.1.3317.4.3.2.1
NAME 'radiusprofile'
SUP top
MAY ( radiusArapFeatures $ radiusArapSecurity $ radiusArapZoneAccess $ radiusAuthType $
radiusCallbackId $ radiusCallbackNumber $ radiusCalledStationId $ radiusCallingStationId $
radiusClass $ radiusClientIPAddress $ radiusFilterId $ radiusFramedAppleTalkLink $
radiusFramedAppleTalkNetwork $ radiusFramedAppleTalkZone $ radiusFramedCompression $
radiusFramedIPAddress $ radiusFramedIPNetmask $ radiusFramedIPXNetwork $ radiusFramedMTU $
radiusFramedProtocol $ radiusCheckItem $ radiusReplyItem $ radiusFramedRoute $
radiusFramedRouting $ radiusIdleTimeout $ radiusGroupName $ radiusHint $
radiusHuntgroupName $ radiusLoginIPHost $ radiusLoginLATGroup $ radiusLoginLATNode $
radiusLoginLATPort $ radiusLoginLATService $ radiusLoginService $ radiusLoginTCPPort $
radiusLoginTime $ radiusPasswordRetry $ radiusPortLimit $ radiusPrompt $
radiusProxyToRealm $ radiusRealm $ radiusReplicateToRealm $ radiusServiceType $
radiusSessionTimeout $ radiusStripUserName $ radiusTerminationAction $
radiusTunnelClientEndpoint $ radiusProfileDn $ radiusSimultaneousUse $
radiusTunnelAssignmentId $ radiusTunnelMediumType $ radiusTunnelPassword $
radiusTunnelPreference $ radiusTunnelPrivateGroupId $ radiusTunnelServerEndpoint $
radiusTunnelType $ radiusUserCategory $ radiusVSA $ radiusExpiration $ dialupAccess $
SuspensionDate $ radiususerPassword )
)
#
#********************************************************************
#