Hello. I want to get vlanId (radiusTunnelPrivateGroupId) of the user I want to authenticate. Ldap query How should I write?
You can do dynamic LDAP queries:
authorize { ... if (specific AP) { update reply { Tunnel-Private-Group-Id := "{ldap:ldap:///ou=Users,dc=edu,dc=com,uid?sub?radiusTunnelPrivateGroupId?}" } } → Failed parsing expanded string Is there a description method? Can I get vlan registered in ldap with any uid? Thanks nn
-----Original Message----- From: Freeradius-Users <freeradius-users-bounces+nobuatsu.nishimura.dg=ps.hitachi-solutions.com@lists.freeradius.org> On Behalf Of Alan DeKok Sent: Wednesday, July 17, 2019 7:33 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: [!]Re: I want to branch an ldap attribute On Jul 17, 2019, at 2:44 AM, Yuya Yanagi <peacefull64@gmail.com> wrote:
There is a request to return the Vlan-id only when connecting to a specific AP at the customer's request, and we are struggling to solve the problem.
You can do dynamic LDAP queries: authorize { ... if (specific AP) { update reply { Tunnel-Private-Group-Id := "%{ldap:... LDAP QUERY ....}" } }
I'll show you the mods-available/ldap file. I've included mapping file in the update section below, but I want to include additional mapping file for specific AP.(Location of the arrow mark) But if you include an if statement, you will get an error [Invalid location for 'if'].
Yes, because the "if" condition isn't allowed there. Alan DeKok. - List info/subscribe/unsubscribe? See https://clicktime.symantec.com/3EofmZr5EVDowDheUVUbpYU7Vc?u=http%3A%2F%2Fwww...