<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I have found the solution <span style="font-size: 12pt;">just add this group membership filter in /etc/raddb/modules/ldap file.</span><div><br></div><div><div>groupmembership_filter = "(&(objectcategory=group)(member:1.2.840.113556.1.4.1941:=%{control:Ldap-UserDn}))"</div><div><br></div><br><div><div id="SkyDrivePlaceholder"></div><hr id="stopSpelling">From: tchek14@hotmail.com<br>To: freeradius-users@lists.freeradius.org<br>Subject: authentification ldap subgroup<br>Date: Wed, 24 Apr 2013 10:49:42 +0200<br><br>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr"><span style="color:rgb(68, 68, 68);font-size:15px;line-height:21px;">Hello all ! </span><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;">I have configured freeradius 2.1.12-4 with ldap group authorization. My problem is it's doesn't work with subgroup. </div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;">I have a group with subgroup and when ldap verify group of user it doesn't see subgroup of user.</div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;">my ldap configuration modules :</div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><div>ldap {</div><div>#Note that this needs to match the name in the LDAP</div><div>#Server certificate, if you.re usin ldaps.</div><div>server = "192.168.1.3"</div><div>identity = "cn=user_ldap,ou=users,dc=toto,dc=local"</div><div>password = Toto1</div><div>basedn = "dc=toto,dc=local"</div><div>#filter = "(&(sAMAccountName=%{Stripped-User-Name:-%{User-Name}}))"</div><div>filter = "(&(objectclass=user)(objectcategory=user)(userPrincipalName=%{%{Stripped-User-Name}:-%{User-Name}}*))"</div><div><br></div><div># Group membership checking. Disabled by default.</div><div><br></div><div>#groupname_attribute = cn</div><div>groupmembership_filter = "(|(&(objectClass=group)(member=%Ldap-UserDn}))(&(objectClass=top)(uniquemember=%{Ldap-UserDn})))"</div><div>groupmembership_attribute = memberOf</div><div><br></div><div>chase_referrals = yes</div><div>rebind = yes</div><div>}</div></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;">Anyone can help me ?</div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;"><br></div><div style="line-height:21px;color:rgb(68, 68, 68);font-size:15px;">Thanks in advance !</div> </div>
<br>-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html</div></div> </div></body>
</html>