Hello,
I am currently integrating Splunk 6.0 with our Cisco ISE to handle authentication.
Rather than having a static user mapping list as the sample script suggests, I want to handle it over Radius.
For this purpose, I decided to go with the Service-Type Radius attribute.
I now have this:
root@Splunk1:/opt# radclient -s -r 2 ise.hapro.no auth xxxxxx
NAS-IP-Address="10.100.26.34",User-Name="xxxxx",User-Password="xxxxxxxxx"
Received response ID X, code 2, length = 125
User-Name = "xxxxx"
Service-Type = Administrative-User
State = xxxxxx
Class = xxxxxx
Total approved auths: 1
Total denied auths: 0
Total lost auths: 0
Unfortunately, I do not know/like python enough to fix the script to parse the Service-Type attribute and use that in stead of the lookup it uses by default.
If someone would be kind enough to touch up the radiusScripted.py sample for me, I would be very greatful!
-- Cheers, Morten
... View more