<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>Global variables</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Hi,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri"> Me again, I have had a google but it’s not produced much, so apologies if I’ve overlooked some piece of documentation somewhere.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Is it possible to set global variables at freeradius runtime? The background is that I want to check against a user</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">’s primarygroupid from AD to make sure they are in the right group. The ldap-group won’t work with primary groups as far as I can tell, so I</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">’d like to give the FR server the gid information through a wbinfo lookup then have it pick that ldap attribute and compare against the global</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Seems a bit excessive to do it each request. I know it</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">’s not something likely to change</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">gid</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">often but would like to not have to update it</FONT></SPAN><SPAN LANG="en-gb"> <FONT FACE="Calibri">at all should it change</FONT></SPAN><SPAN LANG="en-gb"><FONT FACE="Calibri">. We have an “over zealous” AD administrator..</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Thanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-gb"><FONT FACE="Calibri">Andy</FONT></SPAN><SPAN LANG="en-gb"></SPAN></P>
</BODY>
</HTML>