LEGRAND PDU - Page 455

June 2018
Legrand PDU User Guide 455
FreeRADIUS Standard Attribute Illustration
With standard attributes, NO dictionary files are required. You simply add all user data, including user names,
passwords, and roles, in the following FreeRADIUS path.
/etc/raddb/users
 Presumptions in the illustration:
 User name = steve
 Steve's password = test123
 Steve's roles = Admin and SystemTester
 To create a user profile for "steve" in FreeRADIUS:
1. Go to this location: /etc/raddb/users.
2. Add the data of the user "steve" by typing the following. Note that the values after the equal sign (=) must
be enclosed in double quotes (").
steve Cleartext-Password := "test123"
Filter-ID = "Raritan:G{Admin}",
Filter-ID = "Raritan:G{SystemTester}"
Vendor-Specific Attributes
You must specify the following properties when using a RADIUS vendor-specific attribute (VSA).
 Vendor code = 13742
 Vendor-assigned attribute number = 26
 Attribute format = String
The syntax of the vendor-specific attribute for specifying one or multiple roles is:
Raritan:G{role-name1 role-name2 role-name3}
For configuration on NPS, see NPS VSA Illustration (on page 455).
For configu
ra
tion on FreeRADIUS, see FreeRADIUS VSA Illustration (on page 465).
NPS VSA Illustration
To configure Windows 2008 NPS with the vendor-specific attribute, you must:
a. Add your Legrand PDU to NPS. See Step A: Add Your Legrand PDU as a RADIUS Client (on page
443).
b. On the NPS, configure co
nnection request policies and the vendor-specific attribute. See Step B:
Configure Connection Policies and Vendor-Specific Attributes (on page 459).
Some configur
ation associated with Microsoft Active Directory (AD) is also required for RADIUS
authentication. See AD-Related Configuration (on page 466).