The question is, I can configure a ³groupsearch² for 2 different objectclasses when all the database have no groups? (everybody is in the same group) Like this.. Group (ALL users at the same group) - User1 (objectClass - Student) - User2 (objectClass - Teacher) Thank's On 11/12/13 15:20, "John Dennis" <jdennis@redhat.com> wrote:
On 12/11/2013 11:20 AM, Jean Carlos Coelho wrote:
Hi,
Is there some way to configure ldap at radius to read only object classes and not groups? To allow or reject the access to some destination?
This question makes no sense because everything in LDAP belongs to an object class. You can't have LDAP data that isn't in an object class.
You can change the LDAP searches to return whatever you want. Figure out what you want, modify the search, and act upon the result using unlang. There examples on how to do this in the archives of this list.
Hint: use the ldapsearch command line tool to figure out how to construct your search, then paste that search into your radius config.
-- John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html