<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
So it will search and find the group, but I can still connect with my
user even though it isn't in that group. Any ideas on how to keep a
user from connecting if their account isn't in that group?<br>
<br>
<br>
<br>
Thibault Le Meur wrote:
<blockquote cite="mid:00bf01c7b357$0f29c1f0$161ce4a0@supelec.fr"
type="cite">
<blockquote type="cite">
<pre wrap="">Basically trying to
figure out
what I need to add to these lines: groupname_attribute,
groupmembership_filter, and groupmembership_attribute. Also
not sure if
I need to add something to users file like: DEFAULT LDAP-Group ==
"wireless". Can anyone provide input on what I need to
configure, Thanks.
wireless group in ldap, you can see cjarrett is a member:
dn: cn=wireless,ou=Groups,dc=itfreedom,dc=com
objectClass: posixGroup
cn: wireless
gidNumber: 1011
memberUid: cjarrett
</pre>
</blockquote>
<pre wrap=""><!---->
You're using POSIXGroups:
groupname_attribute = cn
Groupmembership_filter = "(&(objectclass=posixGroup)(memberUid=%u))
No groupmembership_attribute.
In you users file, for instance:
DEFAULT LDAP-Group == "wireless" ...
See /usr/share/doc/freeradius/rlm_ldap text file.
HTH,
Thibault
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
</body>
</html>