Thanks, unfortunately I'm using 2.2.8 (and my customer doesn't want to upgrade at the moment (as for Alan's previous reply). On 7/26/19 5:14 PM, Arran Cudbard-Bell wrote:
I noticed that when defining the <server>-Ldap_Group as you suggested, the <server> prefix must match the name defined for a single server, otherwise it fails: Yes.
is there a way to refer to the group of servers (something like group 389DS in authorize and the corresponding 389DS-Ldap-Group in users)? Unfortunately, no. https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/mods-avail...
Set the same cache attribute for each module, and enable cacheable_name or cacheable_dn.
Whichever module is called in the redundant section will populate the group list, which you can then check in unlang.
-Arran
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Stefano Cailotto --------------------------------------------------------------------------- EDALab s.r.l. - Networked Embedded Systems Sede operativa: Via ca Nova Zampieri, 12, 37057 San Giovanni Lupatoto (VR) - Italy Sede legale: Cà Vignal 2, Strada Le Grazie, 15, 37134 Verona - Italy C.F./P.IVA/Iscr. Reg. Imprese di Verona n. 03706250234 Numero REA: VR - 358813 Capitale sociale: 10.000 euro --------------------------------------------------------------------------- email: stefano.cailotto@edalab.it web: http://www.edalab.it | https://www.box-io.com skype: stefano.cailotto tel: +39-045-257-0357 mobile: +39-391-731-0244 ---------------------------------------------------------------------------