<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hi,</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>Is there some way to configure ldap at radius to read only object classes and not groups? To allow or reject the access to some destination?</div>
<div><br>
</div>
<div>Eg.</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
groupname_attribute = cn</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
groupmembership_filter = "(&(objectClass=posixGroup)(memberUid=%{User-Name})(objectclass=brEduPerson))”<span class="Apple-tab-span" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; white-space: pre;">
</span><span style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">Is there some way to configure ldap at radius to read only object classes and not groups? To allow </span></p>
</div>
<div><br>
</div>
<div>My LDAP server does not have groups, so I can’t use the above… how can I get some object classes? Instead of groups? Like (search logs in debug down):</div>
<div><br>
</div>
<div>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;">uid=69327181034<o:p></o:p></span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">brEduAffiliation<o:p></o:p></span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;"> brEntranceDate: 20091008<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">brEduAffiliation: 1<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">brEduAffiliationType: <b><u>employee</u></b><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">objectClass: brEduPerson<o:p></o:p></span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;"> </span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;">uid=02494605059<o:p></o:p></span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;"> brEduAffiliation=1<o:p></o:p></span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;"> brEntranceDate: 20120110<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">brEduAffiliation: 1<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">brEduAffiliationType: <b><u>student</u></b><o:p></o:p></span></p>
<p class="MsoNormal" style="font-family: Calibri, sans-serif;"><span lang="EN-US" style="color: windowtext;"></span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span lang="EN-US" style="color: windowtext;">objectClass: brEduPerson</span></p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<br>
</p>
<div>The search returns this:</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Info: +- entering group post-auth {...}</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Info: ++? if (LDAP-Group == "student")</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: [ldap] Entering ldap_groupcmp()</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Info: <span class="Apple-tab-span" style="white-space:pre">
</span>expand: ou=people,dc=DOMAIN,dc=EDU -> ou=people,dc=DOMAIN,dc=EDU</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Info: <span class="Apple-tab-span" style="white-space:pre">
</span>expand: (&(objectClass=posixGroup)(memberUid=%{User-Name})(objectclass=brEduPerson)) -> (&(objectClass=posixGroup)(memberUid=74879995053)(objectclass=brEduPerson))</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: [ldap] ldap_get_conn: Checking Id: 0</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: [ldap] ldap_get_conn: Got Id: 0</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: [ldap] performing search in ou=people,dc=DOMAIN,dc=EDU, with filter (&(cn=student)(&(objectClass=posixGroup)(memberUid=74879995053)(objectclass=brEduPerson)))</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: [ldap] object not found</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: [ldap] ldap_release_conn: Release Id: 0</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Debug: rlm_ldap::ldap_groupcmp: Group student not found or user is not a member.</p>
<p style="margin: 0px; font-size: 11px; font-family: Menlo; color: rgb(245, 245, 245); background-color: rgb(0, 0, 0);">
Wed Dec 11 14:18:44 2013 : Info: ? Evaluating (LDAP-Group == "student") -> FALSE</p>
</div>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<br>
</p>
<p class="MsoNormal" style="margin-left: 35.4pt; font-family: Calibri, sans-serif; text-indent: 35.4pt;">
<span style="font-size: 14px; text-indent: 0px;">Thank You</span></p>
</div>
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Sprechblasentext Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.E-MailFormatvorlage17
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;
font-style:normal;}
span.E-MailFormatvorlage18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage20
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:black;
font-weight:normal;
font-style:normal;}
span.SprechblasentextZchn
{mso-style-name:"Sprechblasentext Zchn";
mso-style-priority:99;
mso-style-link:Sprechblasentext;
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</body>
</html>