DEFAULT Ldap-Group == "Engineering", and then list of reply attributes. Ivan Kalik Kalik Informatika ISP Dana 25/2/2008, "David W Bell" <david@chaoscrypt.com> piše:
Ok been fiddling some more.
What I need to now do is work out which group a user belongs to based on LDAP users and groups.
I am assuming this is in the radius.conf @ the section about groups.
For Example,
This LDAP user.
# belld, people, dxi.net dn: uid=belld,ou=people,dc=dxi,dc=net cn: David Bell gidNumber: 100 givenName: David homeDirectory: /home/belld loginShell: /bin/bash objectClass: top objectClass: posixAccount objectClass: shadowAccount objectClass: inetOrgPerson shadowInactive: -1 shadowMax: 99999 shadowMin: 0 shadowWarning: 7 sn: Bell uid: belld uidNumber: 1000 shadowLastChange: 13920
is a member of this LDAP group
# Engineering, group, dxi.net dn: cn=Engineering,ou=group,dc=dxi,dc=net cn: Engineering gidNumber: 1000 member: uid=belld,ou=people,dc=dxi,dc=net objectClass: top objectClass: posixGroup objectClass: groupOfNames
How do I do this, so that I can then have my users file grant Cisco-AVPair information based on group membership
Thanks
David
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html