Re: bug in rlm_ldap?

I changed the users file as you recommended, the ldap.attrmap contains the additional line:

checkItem User-Category primaryGroupID

Unfortunately also in this case only the Reject entry matches, although the primaryGroupID seems to passed to User-Category: radiusd -AX ..... rlm_ldap: looking for check items in directory... ldap_get_values .... ldap_get_values rlm_ldap: Adding LDAP attribute primaryGroupID as RADIUS attribute User-Category == 515 ldap_get_values

Did you get the second email I sent. I don't believe you can use that check item from ldap in the users file. Try the ldap-group options I sent over in the last email. That should work for you.