LDAP attribute update for clients

Alan DeKok aland at deployingradius.com
Mon Feb 22 18:35:53 CET 2021


On Feb 22, 2021, at 11:24 AM, DEV <dev at dolphin-dev.com> wrote:
> There is no control site, did you mean this?
> https://github.com/FreeRADIUS/freeradius-server/blob/master/raddb/sites-available/control-socket

  Yes.

> I need to write to LDAP, as I need to make this information available this way. As the number of requests is low, this is not an issue.

  OK.

> For authentication, the request in FR has two kinds of credentials:
> 1) the enduser when signing into a service like PPP
> 2) the NAS credentials (shared secret) to connect to the radius server
> 
> Case 1 is already working, for case 2 I don't know which section it is (or if it's possible at all).

  As I said... the server processes packets.  I described how it does that.

> As I did not use Radmin before (as I did not need it before), I assume from your explanation that it shows the data ("NAS last seen") - I just need it to write it back to the LDAP object, just like 1 does.
> 
> Is there a "post-auth update" equivalent for NAS?

  No.

  I explained how the server processes packets.  Please understand that's how the server works.  If you want it to do something else, then refer back to how it actually works.

  Alan DeKok.




More information about the Freeradius-Users mailing list