non-Cisco ACS Radius superuser authentication to CSS

sam_crooks — Tue, 10 Jan 2006 22:41:38 GMT

Hi,

I am trying to figure out what to send the CSS to have super-user authentication work.

We are using free-radius. When I configure:

virtual authentication primary radius

and run the radius server in debug mode (radiusd -fxx)

I see that the CSS contacted the radius server, got and Access-Accept, but authenticated as a user ( CSS11501> prompt )

Is there an AV pair that can be sent to force superuser status?

ie: "shell:priv-lvl=15" for routers??

Re: non-Cisco ACS Radius superuser authentication to CSS

smalkeric — Mon, 16 Jan 2006 19:57:35 GMT

for a superuser, you can set the user name IETP Radius Attributes to server-type 006 administrative, which should be the same in all radius software. By setting the username like this, the authentication would work fine.

topic non-Cisco ACS Radius superuser authentication to CSS in Application Networking

non-Cisco ACS Radius superuser authentication to CSS

Re: non-Cisco ACS Radius superuser authentication to CSS