Thanks Alan Dekok and Ivan Kalik, I will try the two way you sent me in my labo. -----Message d'origine----- De : freeradius-users-bounces+francois.mehault=netplus.fr@lists.freeradius.org [mailto:freeradius-users-bounces+francois.mehault=netplus.fr@lists.freeradius.org] De la part de Alan DeKok Envoyé : vendredi 12 juin 2009 13:28 À : FreeRadius users mailing list Objet : Re: multiple radiusVSA in ldap.attrmap François Mehault wrote:
+ in ldap.attrmap I add
replyItem Cisco-AVPair radiusVSA
replyItem Foundry-Privilege-Level radiusVSA replyItem Foundry-INM-Privilege radiusVSA
You can't do that. You are mapping the "radiusVSA" item to 3 different RADIUS attributes. This will NOT work.
I don’t succeed to give good value for each attribute with OpenLDAP, ldapattrmap, radiusVSA … In addition, I can’t to have two radiusVSA attributes with the same value in OpenLDAP.
Yes, you can. Read the comments at the top of ldap.attrmap. Use the "+=" operator. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html