Authorization with Active Directory

Phil Mayers p.mayers at imperial.ac.uk
Thu Jan 26 17:43:50 CET 2012


On 01/26/2012 04:42 PM, Phil Mayers wrote:

> 3. Run the LDAP module, then compare the attribute. Note - because
> you've mapped the item to check/control lists, you can't use a "users"
> file - you must use unlang, like so:
>

Damn, sorry, this should be:

authorize {
   ...
   ldap
   if (control:My-Extension10 == VPN) {
     ...
   }
   ...
}



More information about the Freeradius-Users mailing list