Hello,

I am trying to find out how to achieve this if possible at all.

I'll come back to you as soon as I find out.

Thanks.

Regards,

Luciano Testa

Hello Claus,

At the moment this is not possible. Radius custom attributes are not supported.

I found and Idea about this in the Ideas Portal. You can add your vote and a comment to it so PM can notice this:

 RADIUS Custom Attributes 

Thanks.

Regards,

Luciano Testa

Hello Luciano,

AA is using a standard freeradius, which supports the custom VSAs, I found in the radius debug log that the built-in radius server is already reading all custom dictionaries on startup by default. (they are in the radius docker container under /usr/share/freeradius)

I only had to find the attribute name listed in the dictionary.cisco.asa file (ASA-Group-Policy) and put in the radius policy result specification:

ASA-Group-Policy / groups / .*?(?i:cn=)(policy_([^,]+)) / {1},  (finds all groups beginning with policy_ und cut cn= and all from "," to get only the group name not the ldap dn, and it works perfect!

It should be documented that 237 vendor specific dictionaries are already included.

Maybe that info helps others integrating there equipment.

It should also be supported as standard by Opentext, because in freeradius it is supported.

Hi Luciano,

do you know if there is a documentation about the included dictionaries in the container images? I'd like to check if my needed VSAs are already included.

Thanks in advance!

Daniel

Hi Daniel,

execute "docker exec -it aaf_radiusd_1  bash" got to  /usr/share/freeradius.

You can find 237 dictionary files the AAF Radius Server is loading on startup.

Find your Vendor specific dictionary and look for the VSA.

regards

claus

Thanks claus! Worked for me and I found my needed dictionary.

Regards
Daniel