bug in rlm_ldap?

[Dusty Doris]

> I changed the users file as you recommended, the ldap.attrmap contains the 
> additional line:
>
> checkItem       User-Category                   primaryGroupID
>
>
> Unfortunately also in this case only the Reject entry matches, although the 
> primaryGroupID seems to passed to User-Category:
> radiusd -AX
> .....
> rlm_ldap: looking for check items in directory...
> ldap_get_values
> ....
> ldap_get_values
> rlm_ldap: Adding LDAP attribute primaryGroupID as RADIUS attribute 
> User-Category == 515
> ldap_get_values
>

Did you get the second email I sent.  I don't believe you can use that 
check item from ldap in the users file.  Try the ldap-group options I sent 
over in the last email.  That should work for you.