On Jun 19, 2020, at 9:55 AM, Wessel Louwris <wessel@stutit.nl> wrote:
Op 19 jun. 2020, om 15:36 heeft Adam Bishop <Adam.Bishop@jisc.ac.uk> het volgende geschreven:
On 19 Jun 2020, at 13:11, Wessel Louwris <wessel@stutit.nl> wrote:
DEFAULT Ldap-UserDN := "%{User-Name}”
Do google permit that format?
i.e. if you run ldapsearch from the cli with `-D "username"` does it work?
Adam Bishop
Thanks for you reply! Yes, if I run
LDAPTLS_CERT=ldap-client.crt LDAPTLS_KEY=ldap-client.key ldapsearch -W -D user@company.nl -H ldaps://ldap.google.com -b dc=example,dc=com '(mail=user@company.nl)’
on the container where my freeradius is running I can login with the password from user@company.nl and get results.
That’s why I hope I can convince freeradius to use that username for binding also.
Kind regards,
Wessel
That makes me think you probably just need to configure the LDAP module to turn what you give it into a DN similarly to how one might customize the queries used by the SQL module. I haven’t used the LDAP module myself, so I can’t really help you there. -- Coy Hile coy.hile@coyhile.com