Hello all,
I have setup Observium with radius auth. Today I noticed that everyone is getting full admin rights in Observium. I changed my own radius settings and tested.
Observium is running on 10.230.11.81 and radius on 10.230.11.111 This is the radius response:
(587) Sent Access-Accept Id 94 from 10.230.11.111:1812 to 10.230.11.81:43443 length 0 (587) Juniper-Local-User-Name = "remote" (587) Filter-Id = "pfy" <-- (587) GENIE-USER-PRIVILEGE = PRIV-ADMINISTRATOR (587) Infinera-User-Category = "administrator" (587) Service-Type = Administrative-User (587) NS-Admin-Privilege = All-VSYS-Root-Admin (587) Class = 0x6e65
Config.php:
$config['auth_radius_groups']['admin']['level'] = 10; // Full administrative access $config['auth_radius_groups']['cto']['level'] = 7; // Global read access with secured info (ie rancid configs) $config['auth_radius_groups']['pfy']['level'] = 5; // Global read access
[cid:image005.png@01D6A21D.84BFC540]
Any idea what I'm doing wrong?
Met vriendelijke groet,
Peter Derissen Eurofiber Nederland Network Engineer Safariweg 25-31 +31 (0)6 11587110 3605 MA Maarssen
[cid:image006.png@01D6A21D.84BFC540]https://www.eurofiber.nl/
Volg ons op Twitterhttps://twitter.com/Eurofiber | Linkedinhttps://www.linkedin.com/company/eurofiber | Facebookhttps://www.facebook.com/eurofiberNL/ | Youtubehttps://www.youtube.com/channel/UC6DavgEm7-ktAD8_Co_qnMA
Wilt u op de hoogte blijven van technische ontwikkelingen aan ons netwerk, nieuwe ICT ontwikkelingen en klantervaringen? Meld u dan aan voor onze maandelijkse nieuwsbriefhttps://marketing.eurofiber.com/acton/fs/blocks/showLandingPage/a/15570/p/p-003c/t/page/fm/0. [cid:image007.jpg@01D6A21D.84BFC540]https://www.eurofiber.nl/
******** IMPORTANT NOTICE ******** This e-mail (including any attachments) may contain information that is confidential or otherwise protected from disclosure and it is intended only for the addressees. If you are not the intended recipient, please note that any copying, distribution or other use of information contained in this e-mail (and its attachments) is not allowed. If you have received this e-mail in error, kindly notify us immediately by telephone or e-mail and delete the message (including any attachments) from your system.
Please note that e-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be subject of unauthorized interception or other interference without the knowledge of sender or recipient. Eurofiber only sends and receives e-mails on the basis that Eurofiber is not responsible for any such computer viruses, corruption or other interference or any consequences thereof. Eurofiber Nederland B.V. is registered in the Chamber of Commerce of Amsterdam with number 34134377, VAT number NL 8088.51.524 B01. Eurofiber N.V. has its registered office at Belgicastraat 5 bus 7, 1930 Zaventem and is registered under national number 0435.204.851.
