topic Re: Radius authentication with custom admin roles in General Topics

Radius authentication with custom admin roles

asia — Fri, 02 Dec 2011 10:48:53 GMT

Hello,

Is it supported to authenticate administrators throw a free-radius server and authorize them using a custom role?

I see that there are 5 VSA in the radius dictionary on the PAN firewall for free-radius witch correspond ti the predefined admin roles. Is it possible to expad this list?

Regard's.

Re: Radius authentication with custom admin roles

rmonvon — Tue, 06 Dec 2011 16:31:17 GMT

Yes, you should be able to define custom admin role while using Radius VSA. Please see this for the example: https://live.paloaltonetworks.com/docs/DOC-1765

We only support 5 attributes today and you can contact your local Palo Alto account team to request the enhancement.

Thanks.