LDAP retrieve additional attributes and map to radius attributes

[Workout Yahoo]

Hi, Sorry if this question is a repeat but I saw the
mail archives and not able to find what I am looking
for.

We are using freeradius to connect to LDAP server.  
I can able to authenticate with the radius sever fine.

Now I want to retrieve ldap attribute called
productId. Depends on the productId, I have to give
access the users.

If the productId=1234, then all the users will get
access. If not..no access.

After reading the mail archives and documentation, I
saw I need to do changes in
/etc/raddb/dictionary,/etc/raddb/users,
/etc/raddb/ldap.attrmap

Can you please explain me what is the right config I
need to modify.

You help is really appreciated.
Thanks and regards.


Here is the radiusd.conf for ldap. 

ldap {

server = "testldap.xyz.com"
identity = "cn=Directory Manager"
password = 1223
basedn = "dc=test1213,dc=household,o=internet"


filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
encryption_scheme = crypt
start_tls = no
dictionary_mapping = ${raddbdir}/ldap.attrmap

ldap_connections_number = 5

password_attribute = userPassword
timeout = 4
timelimit = 3
net_timeout = 1

#compare_check_items = yes
#do_xlat = yes
# access_attr_used_for_allow = yes

}

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com