Thanks Alan! And how do I tell Freeradius that only some LDAP groups can authenticate against a client? I read the docs but did not understood the connection between the users file and the virtual server conf. best regards On Fri, May 13, 2011 at 2:28 AM, Alan DeKok <aland@deployingradius.com>wrote:
Herbert Fischer wrote:
I would like to setup LDAP module with different settings for different clients.
How can I do this?
Either set up a different virtual server for each client, OR use "unlang" to check "if client X, use ldap X"
Can I setup multiple LDAP module settings and specify which one I would like to use for a site or client?
Yes, but you need to edit the "authorize" section to replace:
ldap with
if (client 1 ..) { ldap1 } elsif (client 2...) { ldap2 } ...
Can I define some of the LDAP settings inside the site or client config?
No.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html