Finally, the users file config:
DEFAULT domain1-Ldap-Group == "gr_users_wifi" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id:0 = "X" DEFAULT domain2-Ldap-Group == "gr_users_wifi_domain2" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id:0 = "X"
Yes. LDAP-Group should not be used in v2.x.x if multiple instances of the LDAP module are in use, the instance referred to by LDAP-Group is based on instantiation order which is quite fragile. In v3.x.x LDAP-Group will always refer to the ldap {} (default) instance, to help avoid this sort of confusion. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2