Again. Now we can get attributes from AD domains using the Global Catalog port 3268.
A new problem: there are 2 same accounts in 2 domains. And we use filter = "(sAMAccountName=%{mschap:User-Name})". Looks ldapsearch return 2 results from AD. And freeRADIUS could not handle this now? How should I do to handle this issue?
John
--- 09年7月27日，周一, Luis Azevedo <labraceta@gmail.com> 写道：
发件人: Luis Azevedo <labraceta@gmail.com>
主题: Re: get attributes from multiple AD domains
收件人: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>
日期: 2009年7月27日,周一,下午6:30
Hi,
You need to contact the AD at the Global Catalog port 3268, otherwise it will return results only for the current AD. Also ensure your AD is a Global Catalog and the Replication connections are working fine.
Hope it helps,
On Jul 27, 2009, at 03:27 , John wrote:
|
I follow up this link to set up freeRADIUS talk to AD,
It can work and can get VLAN attribute from AD through LDAP module (ldap_search).
But we need to support 2 AD domains. NTLM_auth can work in multiple domains. But we can not get attributes from multiple domains. Anyone can give me some advice?
Thanks.
John. |
好玩贺卡等你发，邮箱贺卡全新上线！-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----下面为附件内容-----
|