On Apr 6, 2020, at 10:36 PM, Daniel Oakes <daniel@2600hz.com> wrote:
As per subject – trying to setup redundant-load-balance (or even redundant – don’t care as long as it works).
Line 157 was ‘ldap’
And you don't have an "ldap" module. So the server has no idea what to do with a bare "ldap" thing in the configuration.
So just wanting some redundancy in the ldap module (as I’m finding freeipa is being arse sometimes and failing to respond, so I want to go to other one of the pair).
I’m going down a rabbit hole in trying to edit stanzas without understanding the implications.
That won't end well...
I ended up in a point where it got further, but now I’m not getting an expansion of the ldap group:
elsif ("%{control:LDAP-Group[*]}" =~ /operations/) { etc
For various magic reasons, you can't do expansion on LDAP groups. The LDAP-Group attribute runs an LDAP group query. The LDAP-Group attribute generally does not contain all of the group information from LDAP. Alan DeKok.