2015-03-24 13:22 GMT+01:00 Sautron Nick <sautronnick@yahoo.fr>:
# Group membership checking. Disabled by default. # groupname_attribute = cn groupmembership_filter = "(&(Login=%{%{Stripped-User-Name}:-%{User-Name}})(isMemberOf=ou=groups,ou=eduroam,dc=company,dc=fr))"
That filter is broken. What is actually sent to LDAP is (&(Login=Marco)(isMemberOf=ou=groups,ou=eduroam,dc=company,dc=fr)) and for sure it can't find anything because of the isMemberOf=. LDAP tries to find "isMemberOf=ou" and then has an invalid "=groups" setting. What version of FreeRADIUS are you using and can you post an example of one LDAP User entry and one Group entry? Each with its complete DN. If you want/have to hide data please don't use **** but replacement words.