Re: Active directory ldap groups

ldap ldap_staff{

Queries the staff ou in AD

}

ldap ldap_student{

Queries the student ou in AD

}

if(!control:Auth-Type && request:NAS-Port-Type == Async && Ldap-Group == ADGROUP) { update control { Auth-Type = "ntlm_auth" } }

ADGROUP is replaced with whichever group has the appropriate users

http://wiki.freeradius.org/Rlm_ldap#Group_Support Ivan Kalik