Forum Discussion
chocokoala
Altostratus
AltostratusRadius Authentication role not working
Hi Guys, We setup authentication setup using this article: https://support.f5.com/csp/article/K14324#3 But when we logged in using the accounts on the radius, f5 sets the user as admin account...
chocokoalaAltostratus
AltostratusHi i am not sure if i found what you saying (see image) but if yes how can i make it work?
Hi,
Yes, that's part of it. - that sets how the radius part is handled.
But annoyingly what is the config under the drop down as well?
So External User > Role,
So in auth only, a good radius responce will log the user in at the level of External User > Role is set to.
Also do you have "Failback to local set" and are the users in radius and locally as well with the same user name???? This might be over riding things.
P
- chocokoala
Hi here (attached) as for the service type, what should i select?
- chocokoala
I remove the enable Fallback to local but still the same, i set the authentication type to Authenticate only
Cool,
So that "Administrator" setting is what's over riding everything and setting everything everyone to Admin.Personally i set that to No Access, Then you MUST have a access right set to gain access.
The other thing to then doi is change the service type from "Authenticate Only" to something suitable for your use case. I must admit i found info on those settings a bit weak.
But i used default and everything burst into life on my side.
What that will do, is then tell the IF to look at the other parameters rather than just authentication and allowing the users in at the default level which is set by "External Users > Roles"
Hope that helps.Also what groups have you setup? And have you got the same config on your radius server side?
