Hi all, I'm using Freeradius 2.1.6 talking to an LDAP server. I am able to do basic LDAP authentication and everything is fine from that point of view. What I am trying to do is retrieve some additional values from the LDAP server, I'm sure it should be a simple thing to do but I can't work out how to do it. e.g. running ldapsearch -h ldap.server -x -b"ou=auth,dc=uni,dc=co,dc=uk" "(uid=a3)" returns dn: uid=a3,ou=people,ou=auth,dc=uni,dc=co,dc=uk ou: My Department mail: email@example.com To being with I'd like to put 'mail' or 'ou' into the Reply-Message attribute - does anyone have any suggestions? (This is the first time I'm using LDAP, so please go easy if I've missed something obvious). Cheers, -John -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
On Fri, Aug 21, 2009 at 08:36:58PM +0100, John Smith wrote:
I'm using Freeradius 2.1.6 talking to an LDAP server. I am able to do basic LDAP authentication and everything is fine from that point of view.
What I am trying to do is retrieve some additional values from the LDAP server, I'm sure it should be a simple thing to do but I can't work out how to do it. [snip] To being with I'd like to put 'mail' or 'ou' into the Reply-Message attribute - does anyone have any suggestions? (This is the first time I'm using LDAP, so please go easy if I've missed something obvious).
Have you looked at dictionary_mapping in your ldap {} configuration, and the default ldap.attrmap? john -- John Morrissey _o /\ ---- __o jwm@horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__
What I am trying to do is retrieve some additional values from the LDAP server, I'm sure it should be a simple thing to do but I can't work out how to do it.
e.g. running ldapsearch -h ldap.server -x -b"ou=auth,dc=uni,dc=co,dc=uk" "(uid=a3)" returns dn: uid=a3,ou=people,ou=auth,dc=uni,dc=co,dc=uk ou: My Department mail: email@example.com
To being with I'd like to put 'mail' or 'ou' into the Reply-Message attribute - does anyone have any suggestions? (This is the first time I'm using LDAP, so please go easy if I've missed something obvious).
Map the attributes in ldap.attrmap. Ivan Kalik Kalik Informatika ISP
participants (3)
-
Ivan Kalik -
John Morrissey -
John Smith