Project

General

Profile

Configuring Roles » History » Version 1

Luke Murphey, 05/15/2012 06:33 AM

1 1 Luke Murphey
h1. Configuring Roles
2 1 Luke Murphey
3 1 Luke Murphey
By default, successfully authenticated users are assigned the "user" role. However, this can be overridden by creating a vendor specific attribute with a name of "Vendor Specific" with a vendor code of "RADIUS standard" containing a string. The string ought to contain a colon separated list of roles (like "admin:can_delete"). Below are instructions for configuring IAS:
4 1 Luke Murphey
5 1 Luke Murphey
h2. Open the IAS MMC Snap-In
6 1 Luke Murphey
7 1 Luke Murphey
Start the "mmc"
8 1 Luke Murphey
9 1 Luke Murphey
!Open_mmc_snap_in.png!
10 1 Luke Murphey
11 1 Luke Murphey
h2. Open the Remote Access Policy
12 1 Luke Murphey
13 1 Luke Murphey
Selected "Remote Access Policies" and open the appropriate policy.
14 1 Luke Murphey
15 1 Luke Murphey
!Select_policy.png!
16 1 Luke Murphey
17 1 Luke Murphey
h2. Create a New Attribute
18 1 Luke Murphey
19 1 Luke Murphey
Create a new attribute with a value of "Vendor-Specific" and a vendor of "RADIUS Standard".
20 1 Luke Murphey
21 1 Luke Murphey
!Select_attribute.png!
22 1 Luke Murphey
23 1 Luke Murphey
Select a format of string and set the value to a colon separated list of roles.
24 1 Luke Murphey
25 1 Luke Murphey
!Edit_attribute.png!
26 1 Luke Murphey
27 1 Luke Murphey
The created attribute should look something like this:
28 1 Luke Murphey
29 1 Luke Murphey
!List_attributes.png!