cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Using RADIUS Groups to Assign Permissions on SMBs?

Hello everyone,

I use a RADIUS proxy (DUO) which handles 2FA for Remote Access authentication in locally managed SMB appliances.

The user database is active directory. Duo can use either LDAP or RADIUS to connect to the AD.

Is it possible to use the RADIUS groups to assign permissions?

I took a look at the procedure described in ) to Assign Permissions, but some steps are not really compatible with what we have in local management. I tried using attribute 25 or vendor specific 229 as described without success.

Is it possible? Did anyone here ever accomplish that?

5 Replies

Re: Using RADIUS Groups to Assign Permissions on SMBs?

I would involve TAC here ! Although nothing about that is mentioned in sk105380, it may well be that this is just not supported here...

Re: Using RADIUS Groups to Assign Permissions on SMBs?

Yeah, I will.

I just think that in this kind of situations, Check Mates deploying SMBs daily and trying to work around the same limitations as I am are much more likely to know an answer or a cool trick to make it work.

Thanks Günther.

0 Kudos

Re: Using RADIUS Groups to Assign Permissions on SMBs?

It is a nice picture - and SMBs have a lot to explore and find ones own answers. But limitations, mostly, are limitations and can (or should) not be lifted by any cool trick. 

0 Kudos

Re: Using RADIUS Groups to Assign Permissions on SMBs?

Ok fair enough. But you know SMBs are not super well documented, not as much as the enterprise versions at least. So we do find out a lot by testing and exploring. That is all I meant.

0 Kudos

Re: Using RADIUS Groups to Assign Permissions on SMBs?

Yes, i understand very well - it just sounded as if by some magic trick you could remove a SMB limitation. And we know this is not true...