Hello,

I've managed to set up freeradius with sql.

When a user authenticates, the freeradius server returns the nas some attributes. In my case:

Tunnel-Type = VLAN
Tunnel-Medium-Type = IEEE-802
Tunnel-Private-Group-Id = 4

Now I'm trying to use openldap to authenticate my user

# radtest myuser mypassword 127.0.0.1 1812 mysecret

This command works. The mysecret is stored into the nas table and myuser/mypassword is stored in the openldap server. So I would say that the connectivity with the ldap server works perfectly

But the command doesn't return the attributes I want.

In the file sites-enabled/default I have

authorize {

#files

#sql

ldap

I'm confuse how freeradius will proceed

- Search for myuser in the ldap using the account I provided in modules/ldap

- Check the users password

- Should openldap return the attributes I mentioned above or can this be done with mysql ?

- I'd like to return these attributes if myuser belongs to mygroup, mygroup is created in openldap and myuser belongs to mygroup

I've seen the section in modules/ldap but I don't know how to test if I configured is correct

groupname_attribute = cn

groupmembership_filter = "(&(objectclass=posixGroup)(memberUid=%u))"

Any advice is appreciated.

Thank you