topic Role assignment via Radius AAA Accounting in ZoneDirector

Role assignment via Radius AAA Accounting

aaron_becker_75 — Tue, 11 Feb 2020 04:08:47 GMT

Is it possible to use a radius attribute on a Windows NPS to assign a role to a user authenticating via Radius on a ZD controller? I can find group attributes, but not a role assignment. Trying to authenticate admins via Radius.

FYI: Googled for hours, searched here, either end up getting 404 errors on their website, or 403s if I'm not logged into an account.

Re: Role assignment via Radius AAA Accounting

diego_garcia_de — Tue, 11 Feb 2020 12:37:53 GMT

Yes. Definitively possible. You might need to import the attribute or dictionary onto nps but the attribute you want is called "Ruckus-User-Groups". You can find some more details here. https://support.ruckuswireless.com/do...

Googling for that specific term should lead you in the right direction.

If you don't have a support account you can get the radius dictionary here
https://github.com/wireshark/wireshar...

But from what I understand you have to load the dictionary manually (meaning add the attributes by hand if they are not there).

If using zone director I believe that's it. Just return the name of the role you defined in ZD and it should take. In smartzone I believe you have to create a mapping between the string received in radius and the actual role you want to use. In ZD it's a one to one mapping if I'm not mistaken.

Good luck!

Re: Role assignment via Radius AAA Accounting

diego_garcia_de — Tue, 11 Feb 2020 12:39:36 GMT

Not sure this link works for you. But seems directly what you need. https://support.ruckuswireless.com/ar...