On Sep 6, 2017, at 10:41 AM, $witch <a.spinella@fidus.it> wrote:
it sound a better way than the actual, will test it before to implement actual solution as production one.
That's a good idea.
I wouldn't recommend that.
surely have more details than me, will leave that untouched
Instead, please explain what that script does,
really simple group-list query (based on http://www.soluzionilinux.com/freeradius-ad-domain-users-authentication-and-...)
#!/bin/sh for T in $(/usr/local/bin/wbinfo --user-domgroups `/usr/local/bin/wbinfo -n $1`) ; do /usr/local/bin/wbinfo -s $T | /usr/local/bin/perl -ne 'chomp and print'; done
Wow... that is *slow*. Checking LDAP-Group will be much, much, faster.
I'm willing to bet that you can re-implement that functionality in FreeRADIUS.
ok, will try from now, thank you.
Ask if you have any questions... Alan DeKok.