On Sep 21, 2017, at 1:16 PM, jan hugo prins <jhp@jhprins.org> wrote:
You are absolutely right that changing one thing at the time is the best way to go. the first thing I changes was the version of FreeRadius so I had to rebuild my complete config file. Most things are working fine again. But in the rebuilding of the config file some things actually changed a lot because the old syntax was simply not working anymore.
Yes. That's why we recommend recreating the config, instead of just copying it.
Anyway, now for the users file and the group mapping:
My ldap configuration looks like this:
That should work.
Some entry out of my authorize file:
DEFAULT ldap_betterbe-Ldap-Group == "werkneme-betterbe", Realm == "betterbe.com", Huntgroup-Name == "wireless" Aruba-User-Vlan = 101, Aruba-User-Role = "authenticated"
That should also work.
And the corresponding enrty out of my dictionary file:
ATTRIBUTE ldap_betterbe-Ldap-Group 3000 string
Delete that. It's wrong, and not necessary. Alan DeKok.