This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Radius user auto creation for user portal no email address

Hi All,

I have a ASG320 which I am setting up the user portal with a radius backend for auto user creation which is working for authentication. My issue is when it creates the user there is no email address added to the email field, when a user logs in and it creates a user, there menu bar has none of the whitelist, blacklist etc options because of this.

If I manually add the email it is deleted next time the user is logged in unless I untick the backend sync option but this does not help in automatically populating this field.

So my question is how can I get the email field to populate with the same value as the username? is there a radius reply attribute that can be sent to populate this field? or something that can be modified on the utm to do this ?

\thanks in advance

Nathan

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

Unless you can get your RADIUS server to send the mail attribute for you users, it won't work. You'll need to use another Authentication type (AD) for the User Portal.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 NathanRidge over 9 years ago in reply to Scott_Klassen

Hi Scott,

Well no that's not an issue, I can get radius to reply back the mail no problems, question is what is the attribute? is it a standard radius attrib already in the dictionary ? or is there a vendor specific attrib I need to reply? Once I know specifically what the utm is expecting in the auth reply I can do this, just need to know what...
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

It's an LDAP attribute called mail

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 NathanRidge over 9 years ago in reply to Scott_Klassen

Hi Scott.

ok so are you saying there is no possible way via radius to populate the email field in the user creation? and only option would be to migrate the radius system to ldap?

Thanks Scott
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

Pretty much Nathan. There's some older threads about this as well, with the same issue, and that is what was necessary to resolve this issue.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 NathanRidge over 9 years ago in reply to Scott_Klassen

ok well that sucks :(

was so close, In my radius all ive had to add is a single line like

DEFAULT User-Name =~ "@mydomain.com$", Cleartext-Password := "password123"

and it will authenticate any email address on that domain providing they have the correct password.

Is such a wildcard function going to be possible with ldap as well as return the mail attribute do you know?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

ldap (AD or other) will return the email address as long as it's configured in the ldap account. Just set the ldap to the top of the authentication server list. To my experience, radius only returns a null value for mail, which is why it gets wiped when using it as the primary authentication server for the user portal.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 NathanRidge over 9 years ago in reply to Scott_Klassen

might create a support ticket and see if at Sophos knows what its expecting, its easy to reply email address back If I know what attribute the utm is expecting. Everything we do is using radius so big pain in the butt having to look at changing to anything else
Cancel
Vote Up 0 Vote Down

Cancel
0 NathanRidge over 9 years ago in reply to Scott_Klassen

The bigger picture scott was we just want to be able to add a user on the utm for the user portal login. My issue there from just doing it manually was I tried to setup a user say johnny as the username and put *@mydomain.com as the email address for any address but this does not work... If I make it sales@mydomain.com it will work. So if there was a way to do a whole email domain or wildcard type setup in adding local users?? that would work also
Cancel
Vote Up 0 Vote Down

Cancel