I have looked up documentation on configuring FreeRADIUS to authenticate using the users' mail addresses. I have everything set up correctly from looking at the documentation, I have the filter set to mail={%User-Name}. The FreeRADIUS server looks for the user by the email address when looking at the Google LDAP logs. Google's LDAP server responds with the UID of the user. Then, the FreeRADIUS server attempts to log in using the UID. I do not want this as this is causing all the users in our subdomain to fail the bind. This is because for the subdomain, it would need to be dc=student,dc=madeupdomain,dc=com and that is not how Google responded for the UID of the user. Do I have something configured wrong or is there a way to force the mail address only? Wayne Sprouse, CNA,CCNA,CEH,A+ Wayne Sprouse, CNA,CCNA,CEH,A+ Long Beach School District Network Administrator Work Phone: 228-575-4056 On Thu, Apr 3, 2025 at 1:38 PM Wayne Sprouse <wayne.sprouse@lbsdk12.com> wrote:
The point is to tell Google that you were using ldapsearch.
My mistake, I didn't fully understand that. I have told Google about doing the ldapsearch and not being able to bind with the subdomain credentials.
Yes, you can configure the LDAP module to search using the User-Name. This is the default configuration.
It is currently set to search using the filter of their email address. It then gets back the full UID DN from the Google LDAP. I was wanting it to not bother with the UID and instead use the email address as the complete User-Name to authenticate into LDAP.
Wayne Sprouse, CNA,CCNA,CEH,A+
-- "The foregoing electronic message and any files transmitted with it are confidential and are intended only for the use of the intended recipient named above. This communication may contain material protected by the Family Educational Rights and Privacy Act (FERPA). If you are not the intended recipient, copying, distribution or use of the contents of this message is strictly prohibited. If you received this electronic message in error, please notify us immediately at (228-864-1146**)."**