26 Jul
2019
26 Jul
'19
11:14 a.m.
I noticed that when defining the <server>-Ldap_Group as you suggested, the <server> prefix must match the name defined for a single server, otherwise it fails:
Yes.
is there a way to refer to the group of servers (something like group 389DS in authorize and the corresponding 389DS-Ldap-Group in users)?
Unfortunately, no.
https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/mods-avail... Set the same cache attribute for each module, and enable cacheable_name or cacheable_dn. Whichever module is called in the redundant section will populate the group list, which you can then check in unlang. -Arran