LDAP attributes into freeradius

17 Aug 2005

      Here is my goal:

I would like to assign an attribute to certain users in ldap and have 
freeradius look for that attribute to determine whether or not to reply 
back to the NAS device with an IP address pool name.  The users with the 
attribute set would not have the Pool sent and the users without the 
attribute set would have the pool sent.

Here is the rule that I have set for it in the users file:

DEFAULT Huntgroup-Name == "dialup"
         Idle-Timeout = "1800",
         Fall-Through = Yes

DEFAULT Huntgroup-Name == "dialup", No-Pool != "1"
         USR-Framed_IP_Address_Pool_Name = "POOL",
         Idle-Timeout := "120",
         Fall-Through = Yes

dialup is the ldap module I have setup in the radiusd.conf file.  Here is 
that entry:

         ldap dialup {
                 server = "localhost"
                 identity = "cn=Manager,dc=domain,dc=com"
                 password = "*********************"
                 basedn = "ou=Users,o=domain.com,dc=domain,dc=com"
                 filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
                 start_tls = no
                 tls_mode = no
                 dictionary_mapping = ${raddbdir}/ldap-dialup.attrmap
                 ldap_connections_number = 288
                 groupname_attribute = gidNumber
                 groupmembership_filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
                 timeout = 4
                 timelimit = 3
                 net_timeout = 1
                 compare_check_items = no
         }

The problem I'm seeing is that radius doesn't seem to use the value of 
No-Pool.  I have it in the ldap-dialup.attrmap as:
checkItem      No-Pool        radiusNoPool

radiusNoPool is the ldap attribute with a value of 1.

Where else do I need to add the new attribute No-Pool in order for 
freeradius to use it?

Joe H.
GWI Operations.