You will need to setup two (or more) LDAP directory configs in the modules/ldap config.<br><br>AD&#39;s LDAP interface isn&#39;t able to query inter-domain.&nbsp; So you need to setup a LDAP connection per unique domain.<br><br>
<a href="http://wiki.freeradius.org/Rlm_ldap">http://wiki.freeradius.org/Rlm_ldap</a><br><br><div class="gmail_quote">On Mon, Nov 16, 2009 at 9:42 PM, John <span dir="ltr">&lt;<a href="mailto:elmer_radius@yahoo.com.cn">elmer_radius@yahoo.com.cn</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;" valign="top">
<div>Hi,</div>
<div>We are using freeRADIUS-1.1.6 talk to active-directory (multiple DOMAINs: &quot;A.com&quot; and &quot;<a href="http://sub.A.com" target="_blank">sub.A.com</a>&quot;).&nbsp;We use rlm_ldap module Global catalog port&nbsp;to get attributes from ADs.&nbsp;It works fine.</div>

<div>&nbsp;</div>
<div>Now a forest(e.g.&nbsp; &quot;B.com&quot;, &quot;<a href="http://sub.B.com" target="_blank">sub.B.com</a>&quot; ...)&nbsp;that is trust with domain &quot;A.com&quot;. I can not get attributes from forest &quot;B.com&quot;.&nbsp; </div>

<div>How to get attribute from forest &quot;B.com&quot; ?</div>
<div>Any commnet is welcome.</div>
<div>&nbsp;</div>
<div>Thanks.</div>
<div>John</div></td></tr></tbody></table><br>


      <hr size="1"><a href="http://cn.rd.yahoo.com/mail_cn/tagline/card/*http://card.mail.cn.yahoo.com/" target="_blank">  好玩贺卡等你发，邮箱贺卡全新上线！</a><br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br>