Alan, I've tried to map new attributes in ldap.attrmap but for every match in users file.. it will return both new attributes but the sessiontimeout still ruturn no value.. So at the moment i stick to use "exec" to run external script.... unless somebody can suggest better way to do it.. thanks.. --haizam ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, August 25, 2005 23:30 Subject: Re: usage of exec to get LDAP value..
"haizam" <haizam@myjaring.net> wrote:
In LDAP.. user's entry will have additional 2 attributes
TimeoutPSTN: 4000 TimeoutISDN: 1000
then in users file.. using exec to run small script to get correct value of sessiontimeout based on NAS-Port-Type
See raddb/ldap.attrmap You can map those attributes to Session-Timeout, I think.
If that doesn't work, map them to new attributes, and use the "users" file to copy those attributes to Session-Timeout.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html