IBM Security Verify

 View Only

Specify the Vendor-assigned Attribute number for a Vendor-Specific Attribute -- IBM Security Verify RADIUS server

  • 1.  Specify the Vendor-assigned Attribute number for a Vendor-Specific Attribute -- IBM Security Verify RADIUS server

    Posted Thu September 29, 2022 12:03 AM
    Edited by Timothy Dilbert Thu September 29, 2022 12:04 AM
    Within the IBM Security Verify RADIUS server `IbmRadiusConfig.json` is it possible to specify the `Vendor-assigned Attribute number` within `return-attrs`?

    I am trying to pass some AD attributes to a RADIUS client. Within `return-attrs` I am able to return the value(s) utilising:
    {
      "return-attrs": [
        {
          "name": "Class",
          "value": "{{group-name}}"
        },
        {
          "name": "Service-Type",
          "value": "Login"
        },
        {
          "name": "Vendor-Specific",
          "value": "IT",
          "value-type": "vsa"
        }
      ]
    }​
    The problem is that the client is not accepting/acknowledging the returned values.

    According to the client's documentation, the Attribute number for the value I am trying to return from the RADIUS server is "1". I don't see a way to specify that in the `IbmRadiusConfig.json` file. And, whenever I change "name" from "Vendor-Specific" to the Attribute name in the RADIUS client's documentation, the IBM Security Verify RADIUS server service will not start.

    Apparently, Windows NPS has a way to do specify the `Vendor-assigned attribute number`. I was wondering if anyone here had experience with attempting the same with the Verify RADIUS server.

    ------------------------------
    Timothy
    ------------------------------