Allready tried it, but not working. The users file: DEFAULT Service-Type = Login-User, Fall-Through = 1 DEFAULT Ldap-Group != "cn=routing_admins,ou=groups,dc=mydomain,dc=hu", Auth-Type := Reject In the log, I don't see it, if it ever tries to search for group membership. Does it have to do anything with access_attr = uid? Cheers, Tamas ________________________________________ Feladó: freeradius-users-bounces+tdajka=geomant.com@lists.freeradius.org [freeradius-users-bounces+tdajka=geomant.com@lists.freeradius.org], meghatalmazó: tnt@kalik.net [tnt@kalik.net] Küldve: 2008. október 28. 13:22 Címzett: FreeRadius users mailing list Tárgy: RE: Need help for configuration - LDAP with custom files Failover Add Fall-Through = 1 for Service-Type entry. Ivan Kalik Kalik Informatika ISP Dana 28/10/2008, "Dajka Tamás" <tdajka@geomant.com> piše:
Working, thanks. What about LDAP group membership checking?
DEFAULT Ldap-Group != "cn=routing_admins,ou=groups,dc=mydomain,dc=hu", Auth-Type := Reject
This is not working (inserted after DEFAULT Service-Type = Login-User)
Tamas ________________________________________ Feladó: freeradius-users-bounces+tdajka=geomant.com@lists.freeradius.org [freeradius-users-bounces+tdajka=geomant.com@lists.freeradius.org], meghatalmazó: tnt@kalik.net [tnt@kalik.net] Küldve: 2008. október 28. 12:18 Címzett: FreeRadius users mailing list Tárgy: RE: Need help for configuration - LDAP with custom files Failover
As I see, that I should provide "Service-Type = Login-User" in the reply. Is it possible somehow?
DEFAULT Service-Type = Login-User
In users file. Or put it in ciscoextra where avpair is.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html