Thanks for the pointer Arran, For reference, I replaced: base_dn = "%{reply:Tmp-String-0}" with base_dn = &reply:Tmp-String-0 in the ldap module and the string is no longer escaped! Cheers, Rob -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+rbj=aber.ac.uk@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: 19 September 2016 10:32 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: LDAP distinguished name escaping
On 19 Sep 2016, at 12:07, Rob Johnson [rbj] <rbj@aber.ac.uk> wrote:
Thanks Arran,
Have you any idea how this can be achieved in practice? Yeah, just use an attribute reference i.e. &my-attribute, in place of the double quoted string in the config.
Only a small subset of config items work with it though. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2