Peter Lambrechtsen wrote:
Ahh fair enough, we map the loginDisabled and expirationDate to dummy VSAs and check it in FreeRadius rather than passing that back as part of a bind to LDAP. Helps save ~30ms from the Auth time, and with ~1mil subs in the LDAP database, that's time worth saving.
If you have example config, please share it.
Thanks for doing the work to add eDir support back in again. It "was" going to be one of our major stumbling blocks in moving to FR3.
I was hoping something would step forward.
I'll work over this downtime coming up to christmas to write a script to enable others to perform functional tests against eDir, since all you really need is to download the software, and load up one LDIF with some test users & a universal password policy to test the functionality.
That would be appredciated. Alan DeKok.