Re: Reject users based on LDAP attribute

17 May 2012

      Thanks, it's working.

On Thu, May 17, 2012 at 3:22 PM, Phil Mayers <p.mayers@imperial.ac.uk>wrote:
...
On 05/17/2012 06:54 AM, C.F. Yeung wrote:
...
We have 802.1x authentication via AD. It's okay. Now, we would like to
reject users based on LDAP attribute, WLANStatus. Added attribute in
dictionary and ldap.attrmap as follow. Where should I put the unlang?
/etc/raddb/dictionary
ATTRIBUTE My-Local-wlanStatus 3000 string
/etc/raddb/ldap.attrmap
replyItem My-Local-wlanStatus WLANStatus
It's a REPLY item, so this should be:
if (reply:My-Local-wlanStatus == A1) {
 ...
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/**
list/users.html <http://www.freeradius.org/list/users.html>