Hello all !

I have configured freeradius 2.1.12-4 with ldap group authorization. My problem is it's doesn't work with subgroup.

I have a group with subgroup and when ldap verify group of user it doesn't see subgroup of user.

my ldap configuration modules :

ldap {

#Note that this needs to match the name in the LDAP

#Server certificate, if you.re usin ldaps.

server = "192.168.1.3"

identity = "cn=user_ldap,ou=users,dc=toto,dc=local"

password = Toto1

basedn = "dc=toto,dc=local"

#filter = "(&(sAMAccountName=%{Stripped-User-Name:-%{User-Name}}))"

filter = "(&(objectclass=user)(objectcategory=user)(userPrincipalName=%{%{Stripped-User-Name}:-%{User-Name}}*))"

# Group membership checking. Disabled by default.

#groupname_attribute = cn

groupmembership_filter = "(|(&(objectClass=group)(member=%Ldap-UserDn}))(&(objectClass=top)(uniquemember=%{Ldap-UserDn})))"

groupmembership_attribute = memberOf

chase_referrals = yes

rebind = yes

}

Anyone can help me ?

Thanks in advance !