LDAP Group Default

Albert K alberk at gmail.com
Fri Nov 18 11:46:04 CET 2016


Hi,

I have want to the login user to be authorized according to their user
grouping in Microsoft AD and also a catch all default.  At the moment I am
testing with two DEFAULT.  Is it possible to do a Catch all DEFAULT.  My
example below only catch non hod group.  Any help would be much
appreciated.  Thank you.


/users

DEFAULT Ldap-Group == "cn=hod,cn=users,dc=smartoptz,dc=com"
        Tunnel-Type = VLAN,
        Tunnel-Medium-Type = IEEE-802,
        Tunnel-Private-Group-Id = "30"

DEFAULT Ldap-Group != "cn=hod,cn=users,dc=smartoptz,dc=com"
        Tunnel-Type = VLAN,
        Tunnel-Medium-Type = IEEE-802,
        Tunnel-Private-Group-Id = "40"


More information about the Freeradius-Users mailing list