<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
<META content="MSHTML 6.00.3790.4210" name=GENERATOR></HEAD>
<BODY>
<DIV id=DSEPDIV><SPAN
style="FONT-SIZE: 12pt; COLOR: rgb(0,0,0); FONT-FAMILY: Arial,sans-serif; TEXT-ALIGN: left"><STRONG>UNCLASSIFIED</STRONG></SPAN><BR><BR></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=350543804-13112007>Why not test Ldap-UserDN using a regexp. It will
contain the users' OU as part of the full distinguished
name.</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=350543804-13112007></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=350543804-13112007>regards,</SPAN></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=350543804-13112007>Frank Ranner</SPAN></FONT></DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freeradius.org
[mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freeradius.org]
<B>On Behalf Of </B>Tribes Tom<BR><B>Sent:</B> Friday, 16 May 2008
21:05<BR><B>To:</B> FreeRadius users mailing list<BR><B>Subject:</B> Re: users
advanced configuration<BR></FONT><BR></DIV>
<DIV></DIV>I have already test with group, it runs but i would like to avoir
using groups if it s possible<BR><BR>I prefer just use "ou". It will be much
more easy for the administration.<BR><BR>Thks for the tip about
Auth-Type<BR><BR><BR><BR>
<DIV class=gmail_quote>2008/5/16 Ivan Kalik <<A
href="mailto:tnt@kalik.net">tnt@kalik.net</A>>:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">Use
groups in ldap and configure groupmembership part of radiusd.conf<BR>ldap
configuration. Add users to the groups and use:<BR><BR>DEFAULT
Ldap-Group = "heure", Max-Daily-Session := 3600<BR><BR>to set the
attributes. Don't use Auth-Type. Ldap module should set<BR>Auth-Type ldap
(see set_auth_type configuration option) itself.<BR><BR>Ivan Kalik<BR>Kalik
Informatika ISP<BR><BR><BR>Dana 16/5/2008, "tribestom" <<A
href="mailto:tribes.tom@gmail.com">tribes.tom@gmail.com</A>> piše:<BR>
<DIV>
<DIV></DIV>
<DIV class=Wj3C7c><BR>>Hi<BR>><BR>>I have a little hard to
configure freeradius. here is what i want to<BR>>do :<BR>><BR>>I
want to run an hotspot with different accounts which give
different<BR>>connection time.<BR>><BR>>I have an openldap server
with this organisation :<BR>><BR>>
dc=com<BR>> |<BR>>
dc=exempl<BR>><BR>> |
|<BR>> ou=heure ou=jour<BR>> |
|<BR>> uid=user1
uid=user2<BR>><BR>><BR>>What i have running now
:<BR>><BR>>I can authenticate a users with a time
limit.<BR>><BR>>Here is my users file :<BR>><BR>>DEFAULT
Auth-Type = ldap,Max-Daily-Session :=
3600<BR>><BR>>I want add a second line with correspond to a day like
this :<BR>><BR>>DEFAULT Auth-Type =
ldap,Max-Daily-Session := 86400<BR>><BR>> and i want that user from
ou=heure use the first one and user from<BR>>ou=jour use the policy with
a day time<BR>><BR>>which attribute should i add to this line or how
should i do to realize<BR>>this. I haven t found any clue on the net how
to do this.<BR>><BR>>Here is my ldap conf in radiusd.conf
:<BR>><BR>>server = "<A href="http://192.168.20.240"
target=_blank>192.168.20.240</A>" # ip de la machine avec le serveur
ldap<BR>> identity =
"cn=admin,dc=exempl,dc=lcom" # login sur le serveur ldap<BR>>
password = "******" # mots de
passe sur le serveur ldap<BR>>
basedn = "dc=exempl,dc=com" # base de recherche sur le serveur
ldap<BR>> filter
="uid=%u" # filtre de recherche ( ici tout utilisateur )<BR>>
ldap_connections_number = 5 #
nombre de tentative de connection<BR>>
timeout = 4<BR>>
timelimit = 3<BR>>
net_timeout = 1<BR>>
tls {<BR>>
start_tls = no<BR>>
}<BR>>
dictionary_mapping = ${raddbdir}/ldap.attrmap<BR>>
edir_account_policy_check =
no<BR>><BR>>Sorry for my bad english and thanks for your
help<BR>><BR>>If you need more informations just tell
me<BR>><BR>><BR>>Tribolet<BR>>Thomas<BR>><BR>><BR>><BR>><BR>><BR></DIV></DIV>>-<BR>>List
info/subscribe/unsubscribe? See <A
href="http://www.freeradius.org/list/users.html"
target=_blank>http://www.freeradius.org/list/users.html</A><BR>><BR>><BR><BR>-<BR>List
info/subscribe/unsubscribe? See <A
href="http://www.freeradius.org/list/users.html"
target=_blank>http://www.freeradius.org/list/users.html</A><BR></BLOCKQUOTE></DIV><BR></BLOCKQUOTE></BODY></HTML>