Hi, thanks for your answer. I've tried to do Filter-Id := "%{echo:/usr/sbin/ldap_get_group_info.sh %{User-Name}}" as you told but in the* radiusd -X* log I've got WARNING: Unknown module "echo" in string expansion "%" Then I've tried to do my first attempt (but using the* radiusd -X *debug mode): Filter-Id := `/usr/sbin/ldap_get_group_info.sh %{User-name}` And it works well. Then I've tried a second time, but without the* radiusd -X* command (using *service radiusd start*), and it didn't work. to resume : Filter-Id := `/usr/sbin/ldap_get_group_info.sh %{User-name}` works if I start Freeradius with *radiusd -X* it doesn't works if I start Freeradius with *service radiusd start* Maybe is a question of script execution time? Thanks again for your help, Marc 2015-04-16 10:32 GMT+02:00 Stefan Paetow <Stefan.Paetow@jisc.ac.uk>:
Filter-Id := '/usr/sbin/ldap_get_group_info.sh %{User-name}' ->
/usr/sbin/ldap_get_group_info.sh %{User-name}
That won't work. Single quotes are literally quoting what's in the quotes.
Filter-Id := "/usr/sbin/ldap_get_group_info.sh %{User-name}" ->
/usr/sbin/ldap_get_group_info.sh monUserTest
That looks better, but it doesn't give you what you want.
Does someone knows why it doesn't work? Is there a way to enable some logs to see why it doesn't work?
Yes, run radiusd -X to run it in debug mode, then do a request. Check that user radiusd actually has permissions to execute the script.
Try this:
Filter-Id := "%{echo:/usr/sbin/ldap_get_group_info.sh %{User-Name}}"
That should do the trick provided that user radiusd has permission to execute the script.
Also, you could do the searches you're doing with the LDAP module?
:-)
Stefan Paetow Moonshot Industry & Research Liaison Coordinator
t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG
jisc.ac.uk
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html