Re: FR 3.0.13, reply of attributes missing
I managed it to define and assign the wanted LDAP attributes in the reply messages by defining them in the LDAP module. I am quite finished now but have one question left: All types of my VLAN settings are kept in profiles. In the settings of a device is a "radiusProfileDN" attribute pointing to the profile like cn=PRINTER,ou=VLAN,ou=profiles,ou=radius,dc=compend,dc=com where i.e. radiusTunnelPrivateGroupID and others are defined. Right now, the server is not going to resolve the radiusProfileDN.
Why? I have absolutely no idea and this is the reason of my posting.
Do I have to define here also a matching pair of radius and LDAP attribute which is in module ldap group section treated with filter definitions?\
I don't think so. The Wiki has full documentation on how the LDAP module works. That may help.
I have read the the wiki and "user profile attribut" is what I want but I can't transfer it to my scenario because the choose of the DN of a profile entry containing radius attributes is not depending of a result of a service type. It is a simple extension of the entry without any dependencies. Thanks and best regards Juergen
On Mar 3, 2019, at 5:04 PM, Jürgen Northe <jn@northe-online.de> wrote:
I have absolutely no idea and this is the reason of my posting.
Then run the server in debug mode, as suggested in all of the documentation. Read the output. If it's not clear to you, post it here. Is there anywhere *else* we need to say this, so that people will follow the documentation? We already say it regularly on the list, it's in the "man" page, on the main FreeRADIUS page, in the wiki, and in the link you get when you join this list.
I have read the the wiki and "user profile attribut" is what I want but I can't transfer it to my scenario because the choose of the DN of a profile entry containing radius attributes is not depending of a result of a service type. It is a simple extension of the entry without any dependencies.
So.. the user profile is behaving as documented, but you want it to do something else? Alan DeKok.
participants (2)
-
Alan DeKok -
Jürgen Northe