No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

How to Authenticate and Authorize using RADIUS (FreeRADIUS server)

Publication Date:  2014-08-30 Views:  117 Downloads:  0
Issue Description
Users are authenticated through RADIUS server, but has no authorization unless the user enters super user mode with separate password.  Also when accessing WEB management page, the user has no right to modify configuration.
Alarm Information
N/A
Handling Process
FreeRADIUS is installed on Ubuntu server in this case. 
the users file can be edited by issuing following command:

sudo nano /etc/freeradius/users

you can add a users by entering following texts.

user1   Cleartext-Password := "mypassword"
              Huawei-Exec-Privilege = "15"


Huawei-Exec-Privilege attribute is Huawei specific attribute that only Huawei devices can understand.  This allows user1 to gain level 15 authorization once authenticated by the RADIUS server, and there is no need to enter super user mode with separate password.  Also users are able to modify configuration through WEB management page.

Root Cause
FreeRADIUS server needs to be configured properly in order to give users correct authorization level.
Suggestions
There are many other Huawei specific attributes.  They can be found online.

END