Re: Expanding run-time variables and checking access_attr for allow

The second question.

If I put, ONLY FOR CHECK, the base_filter = "(uniquemember=cn=nicolas.velazquez@uam.es,cn=users,dc=uam,dc=es)" the LDAP replies with No Such Object. But the radius authorization sends ok. The misconfiguration of LDAP is not the question here. The question here is: documentation says if the parameter not exists the authorization doesn't work.

It exists so it does work:

[uam_vpn] user nicolas.velazquez@uam.es authorized to use remote access

Ivan Kalik