Thanks Arran, Have you any idea how this can be achieved in practice? Cheers, Rob -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+rbj=aber.ac.uk@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: 16 September 2016 20:05 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: LDAP distinguished name escaping
On 16 Sep 2016, at 10:04, Alan DeKok <aland@deployingradius.com> wrote:
On Sep 16, 2016, at 9:58 AM, Rob Johnson [rbj] <rbj@aber.ac.uk> wrote:
I am using the python module to return a DN based off the caller IP:
The problem is that the LDAP module doesn't trust attributes by default. It only trusts it's configuration, which comes from the configuration file.
There is no simple way in v3 to dynamically create the DN.
If you pass it in as an attribute reference it isn’t escaped… Just means use the raw value of this attribute. -Arran