On 20 Mar 2019, at 18:08, Brian Julin <BJulin@clarku.edu> wrote:
We had to do a few byzantine things to minimize LDAP calls on our setup.
See http://lists.freeradius.org/pipermail/freeradius-users/2016-January/081595.h...
Thank you! Combining your setup with Alan's earlier suggestions and I now have a working setup which only calls ldap once. I have altered the call to ldap in the inner server as follows: if (! &outer.session-state:NIVO-LDAP-Trigger) { ldap update outer.session-state { User-Profile := "%{ldap:ldap:///ou=groups,o=vault?nivoRadiusProfileDN?one?(&(member=%{control:Ldap-UserDN})(nivoRadiusProfileDN=*))}" Tunnel-Type := &reply:Tunnel-Type Tunnel-Private-Group-ID := &reply:Tunnel-Private-Group-ID Tunnel-Medium-Type := &reply:Tunnel-Medium-Type NIVO-LDAP-Trigger := "ldapdone" } } Thank you all for the help! Cheers, Mark