>Yes. LDAP-Group should not be used in v2.x.x if multiple instances of the LDAP module are in use, the instance referred to by LDAP-Group is based on instantiation order which is quite fragile.
> Finally, the users file config:
>
> DEFAULT domain1-Ldap-Group == "gr_users_wifi"
> Tunnel-Type = VLAN,
> Tunnel-Medium-Type = IEEE-802,
> Tunnel-Private-Group-Id:0 = "X"
> DEFAULT domain2-Ldap-Group == "gr_users_wifi_domain2"
> Tunnel-Type = VLAN,
> Tunnel-Medium-Type = IEEE-802,
> Tunnel-Private-Group-Id:0 = "X"
In v3.x.x LDAP-Group will always refer to the ldap {} (default) instance, to help avoid this sort of confusion.
Arran Cudbard-Bell <a.cudbardb@freeradius.org>
FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html