Machine auth LDAP group checking

Dave Aldwinckle daldwinc at uwaterloo.ca
Mon Jul 18 13:56:38 CEST 2016


Hi Matthew,

I replaced the dot with a hyphen and the search ran!

Thanks for the suggestions.

Dave

On 16-07-18 07:34 AM, Matthew Newton wrote:
> On Mon, Jul 18, 2016 at 07:23:43AM -0400, Dave Aldwinckle wrote:
>> including files in directory /etc/raddb/sites-enabled/
>> including configuration file /etc/raddb/sites-enabled/default
>> /etc/raddb/sites-enabled/default[852]: Parse error in condition
>> /etc/raddb/sites-enabled/default[852]: (&ldap.host-LDAP-Group ==
>> "uw-WiFi-Managed")
>> /etc/raddb/sites-enabled/default[852]:   ^ Invalid request qualifier
>> Errors reading or parsing /etc/raddb/radiusd.conf
> My suspicion: try without the "." in the attribute name. It's used
> for other things so personally I'd expect it may cause trouble.
>
> Matthew
>
>
>> On 16-07-14 04:16 PM, Alan DeKok wrote:
>>> On Jul 14, 2016, at 12:20 PM, Dave Aldwinckle <daldwinc at uwaterloo.ca> wrote:
>>>> (9)       if (ldap.host-LDAP-Group == "uw-WiFi-Managed") {
>>>> (9)       if (ldap.host-LDAP-Group == "uw-WiFi-Managed")  -> FALSE
>>>   Use:
>>>
>>> 	if (&ldap.host-LDAP-Group == "uw-WiFi-Managed")
>>>
>>>    Alan DeKok.
>>>
>>> -
>>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list