>I am setting up freeradius 2.1.6 and seem to be stuck on how do I go about setting up my ldap module to search multiple basedn if the user >is not found in the first? I have four that I need to search in my LDAP tree but cannot figure out the correct way to make it search more >than one. I feel like this is probably something simple I'm missing but can't seem to see it atm.

 

Hi,

I have two instances defined in modules/ldap

 

ldap ldap_staff {

 

……………

 

basedn = “ou=staff, ……………”

 

…………..

 

}

 

ldap ldap_student {

 

……………

 

basedn = “ou=student, ……………”

 

…………..

}

 

 

Then, in authorise section,

 

ldap_staff

if (ok) {

whatever stuff you need

        }

        else {

          ldap_student

          if (ok) {

whatever other stuff you need

          }

          else {

               reject

          }

        }

#

 

In my case the “stuff” returns cisco av pairs to control the switches. The usert is rejected if they don’t exist in either the “staff” or the “student” ou.

 

Hope this helps,

 

Leighton