To search for the NAS you probably want to use shortname, and you'll need to make sure that's unique.
user { # Where to start searching in the tree for users base_dn = "${..base_dn}"
# Filter for user objects, should be specific enough # to identify a single user object. filter = "(&(radiusClientShortname=%{client:shortname})(objectclass=radiusClient))"
... }
IIRC the current client xlat doesn't let you retrieve ID, and you can't use IP addresses if you're using ranges because the LDAP server won't have operators for comparing IPs/ranges.
And before you complain about how horribly inefficient it is, remember you can cache group memberships :) Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2