I have configured freeradius 2.1.12-4 with ldap group authorization. My problem is it's doesn't work with subgroup.
I have a group with subgroup and when ldap verify group of user it doesn't see subgroup of user.
ldap {
#Note that this needs to match the name in the LDAP
#Server certificate, if you.re usin ldaps.
server = "192.168.1.3"
identity = "cn=user_ldap,ou=users,dc=toto,dc=local"
password = Toto1
basedn = "dc=toto,dc=local"
#filter = "(&(sAMAccountName=%{Stripped-User-Name:-%{User-Name}}))"
filter = "(&(objectclass=user)(objectcategory=user)(userPrincipalName=%{%{Stripped-User-Name}:-%{User-Name}}*))"
# Group membership checking. Disabled by default.
#groupname_attribute = cn
groupmembership_filter = "(|(&(objectClass=group)(member=%Ldap-UserDn}))(&(objectClass=top)(uniquemember=%{Ldap-UserDn})))"
groupmembership_attribute = memberOf
chase_referrals = yes
rebind = yes
}