Re: How configure freeradius that check user group in Microsoft Active Direcory

On 23/01/14 20:56, Mathieu Simon (Lists) wrote:

2 AD-specific gotchas:

I will add a 3rd - primary group does not appear in memberOf, so you can't query it very easily.

- AD supports nested groups which requires extra attention if you rely on them. Look out for LDAP_MATCHING_RULE_IN_CHAIN in conjuction with FreeRADIUS.

Hey that is both new to me and really neat; someone should update the FR wiki and/or default configs with an example.