I can see rlm_ldap populate control:Ldap-Group:
Sat Aug 2 12:12:55 2014 : Debug: Added control:ldap_xyz-Ldap-Group with value "abc" Sat Aug 2 12:12:55 2014 : Debug: Added control:ldap_xyz-Ldap-Group with value "def" [...]
But it looks like rlm_cache only caches the first value:
Sat Aug 2 12:12:56 2014 : Debug: (4) cache_xyz : Adding to cache entry: Sat Aug 2 12:12:56 2014 : Debug: (4) cache_xyz : control:ldap_xyz-Ldap-Group += &ldap_xyz-Ldap-Group -> 'abc'
And the next cache lookup only shows the first value:
Sat Aug 2 12:13:02 2014 : Debug: (9) cache_xyz : Merging cached control list: Sat Aug 2 12:13:02 2014 : Debug: (9) cache_xyz : ldap_xyz-Ldap-Group += 'abc'
Is this supposed to work? I am using 3.0.4 rc1.
Yes, but I have a good idea why it's not. So, one last call on multivalued attributes before I write the code. For update {} sections people would prefer update { Foo += &Bar[*] } over update { Foo += &Bar } Even though LDAP multivalued is update { foo += 'bar' } Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2