How about (|(uid=%{user-name})(uid=%{user-name}$)) You may need to escape the $ On 16/05/2011, at 5:06 PM, Alexandros Gougousoudis <gougousoudis-list@servicecenter-khs.de> wrote:

Hi,

just one other question, how is it possible to have (or control) more than one filter in the ldap module? I use our LDAP to have access via PEAP or EAP-TLS, this works, thanks to this list.

The problem now is, that workstations are stored as WORKSTATIONNAME$ (with a $ ath the end, thanks to Samba) and the user is stored with it's username. Unfortunately, the workstations come in their Radius-Request without the "$" sign, just the name. So if I want to lookup a workstationname I have to add a "$" sigh to every request, or LDAP won't find it. Otherwise the $ shouldn't be added while looking for a username.

Is there an idea how to control the ldap filter for this?

TIA Alex

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html