<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div><span>Hello Andres,</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>Thank you for your answer.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>I use radiusd version 2.2.0</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica
Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>I found that </span>groupmembership_filter when I googled for some answers but I have set it back to</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;">groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{control:Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{control:Ldap-UserDn})</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;">as
it was in the original file</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;">I have enabled the ldap debug but I don't see anything related to the groups and any specific reply if a member belongs to a group.</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;">What should I use for the
groupmembership_attribute variable, do I have to replace "radiusGroupName" ?<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;">Regards<br></div><div style="display: block;" class="yahoo_quoted"> <br> <br> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> Le Mardi 12 novembre 2013 8h25, Andres Septer <andres.septer@gmail.com> a écrit :<br> </font> </div> <blockquote
style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div class="y_msg_container"><div id="yiv4994450017"><div><div dir="ltr"><div class="yiv4994450017gmail_extra"><br clear="none"><br clear="none"><div class="yiv4994450017gmail_quote">2013/11/12 Mik J <span dir="ltr"><<a rel="nofollow" shape="rect" ymailto="mailto:mikydevel@yahoo.fr" target="_blank" href="mailto:mikydevel@yahoo.fr">mikydevel@yahoo.fr</a>></span><br clear="none"><blockquote class="yiv4994450017gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
<div><div style="font-size:12pt;font-family:HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;"><div><br clear="none"></div><div style="font-style:normal;font-size:16px;background-color:transparent;font-family:HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;">
I'm confuse how freeradius will proceed</div><div style="font-style:normal;font-size:16px;background-color:transparent;font-family:HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;">
- Search for myuser in the ldap using the account I provided in
modules/ldap</div><div style="font-style:normal;font-size:16px;background-color:transparent;font-family:HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;">- Check the users password</div>
</div></div></blockquote><div><br clear="none"></div><div>You can turn on LDAP debug, it helped me a lot. Check last section of ldap module config</div><div><div><------># ldap_debug: debug flag for LDAP SDK</div><div><------># (see OpenLDAP documentation). Set this to enable</div>
<div><------># huge amounts of LDAP debugging on the screen.</div><div><------># You should only use this if you are an LDAP expert.</div><div><------>#</div><div><------>#<----->default: 0x0000 (no debugging messages)</div>
<div><------>#<----->Example:(LDAP_DEBUG_FILTER+LDAP_DEBUG_CONNS)</div><div><------>ldap_debug = 0x0028.</div></div><div><br clear="none"></div><div> </div><blockquote class="yiv4994450017gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex;">
<div><div style="font-size:12pt;font-family:HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;"><div style="font-style:normal;font-size:16px;background-color:transparent;font-family:HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;">
<span style="background-color:transparent;font-size:16px;">groupmembership_filter = "(&(objectclass=posixGroup)(</span><span style="background-color:transparent;font-size:16px;">memberUid=%u))"</span></div></div>
</div></blockquote><div><br clear="none"></div><div>My groupmembership filter in 2.1.1 looks like this</div><div><br clear="none"></div><div><div><------>groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{control:Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{control:Ldap-UserDn}))</div>
<div><------> groupmembership_attribute = radiusGroupName</div></div><div><br clear="none"></div><div>Config syntax seems to hint that you have very old freeradius. Which version?</div><div><br clear="none"></div><div> Groups can be checked via LDAP-group variable</div>
<div class="yiv4994450017yqt5531599888" id="yiv4994450017yqtfd11810"><div><br clear="none"></div><div>A.</div></div></div></div></div></div></div><br><br></div> </blockquote> </div> </div> </div> </div></body></html>