Using RADIUS Groups to Assign Permissions on SMBs?

[Pedro_Espindola]

Hello everyone,

I use a RADIUS proxy (DUO) which handles 2FA for Remote Access authentication in locally managed SMB appliances.

The user database is active directory. Duo can use either LDAP or RADIUS to connect to the AD.

Is it possible to use the RADIUS groups to assign permissions?

I took a look at the procedure described in ) to Assign Permissions, but some steps are not really compatible with what we have in local management. I tried using attribute 25 or vendor specific 229 as described without success.

Is it possible? Did anyone here ever accomplish that?

[G_W_Albrecht]

I would involve TAC here ! Although nothing about that is mentioned in sk105380, it may well be that this is just not supported here...

[Pedro_Espindola]

Yeah, I will.

I just think that in this kind of situations, Check Mates deploying SMBs daily and trying to work around the same limitations as I am are much more likely to know an answer or a cool trick to make it work.

Thanks Günther.

[G_W_Albrecht]

It is a nice picture - and SMBs have a lot to explore and find ones own answers. But limitations, mostly, are limitations and can (or should) not be lifted by any cool trick. 

[Pedro_Espindola]

Ok fair enough. But you know SMBs are not super well documented, not as much as the enterprise versions at least. So we do find out a lot by testing and exploring. That is all I meant.

[G_W_Albrecht]

Yes, i understand very well - it just sounded as if by some magic trick you could remove a SMB limitation. And we know this is not true...

[BorisL]

Hi Pedro. Did you ever get a solution for this?