set an ldap attribute in the ldap file
Hello, everyone, I would have liked to know if it was possible to "fix" an ldap attr in the ldap file, such as : Tunnel-Type is always equal to VLAN and Tunnel-Medium-Type is always equal to 6 I searched with the operators but I didn't fully understand how they work. for now my file looks like this: [...] update { control:Password-With-Header += 'userPassword' # control:NT-Password := 'ntPassword' # reply:Reply-Message := 'radiusReplyMessage' # reply:Tunnel-Type := 'radiusTunnelType' # reply:Tunnel-Medium-Type := 'radiusTunnelMediumType' # reply:Tunnel-Private-Group-ID := 'radiusTunnelPrivategroupId' reply:Tunnel-Type := "description" reply:Tunnel-Medium-Type := "textelibre" reply:Tunnel-Private-Group-ID := "givenName" # Where only a list is specified as the RADIUS attribute, # the value of the LDAP attribute is parsed as a valuepair # in the same format as the 'valuepair_attribute' (above). control: += 'radiusControlAttribute' request: += 'radiusRequestAttribute' reply: += 'radiusReplyAttribute' } [...] and I would have liked something like this [...] reply:Tunnel-Type == "VLAN" reply:Tunnel-Medium-Type == "6" reply:Tunnel-Private-Group-ID := "givenName [...] in my ldap, description = VLAN and textelibre = 6 but I'd like to free these fields from my ldap thank you in advance for your answers -------------------------------------------------------------------------------------------------------------- Rozanes Yaël Student in License ASUR ( france ;)
On Oct 24, 2018, at 5:19 AM, Yaël Rozanes <irozanes387@hotmail.fr> wrote:
I would have liked to know if it was possible to "fix" an ldap attr in the ldap file, such as : Tunnel-Type is always equal to VLAN and Tunnel-Medium-Type is always equal to 6
Why? The server has many, many, ways to set attributes. Why not use those?
I searched with the operators but I didn't fully understand how they work.
The rlm_ldap documentation describes the operators in detail. It describes how the configuration works.
and I would have liked something like this
No. You can't do that. Don't do that.
but I'd like to free these fields from my ldap
See "man unlang". Look for "update". Don't try to invent some new way of doing things. Use the documented wats to do things. Alan DeKok.
thanks ^^ i return at my researsh ^^ ________________________________ De : Freeradius-Users <freeradius-users-bounces+irozanes387=hotmail.fr@lists.freeradius.org> de la part de Alan DeKok <aland@deployingradius.com> Envoyé : mercredi 24 octobre 2018 12:53 À : FreeRadius users mailing list Objet : Re: set an ldap attribute in the ldap file On Oct 24, 2018, at 5:19 AM, Yaël Rozanes <irozanes387@hotmail.fr> wrote:
I would have liked to know if it was possible to "fix" an ldap attr in the ldap file, such as : Tunnel-Type is always equal to VLAN and Tunnel-Medium-Type is always equal to 6
Why? The server has many, many, ways to set attributes. Why not use those?
I searched with the operators but I didn't fully understand how they work.
The rlm_ldap documentation describes the operators in detail. It describes how the configuration works.
and I would have liked something like this
No. You can't do that. Don't do that.
but I'd like to free these fields from my ldap
See "man unlang". Look for "update". Don't try to invent some new way of doing things. Use the documented wats to do things. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Support & Services<http://www.freeradius.org/list/users.html> www.freeradius.org The world's leading RADIUS server. The project includes a GPL AAA server, BSD licensed client and PAM and Apache modules. Full support is available from NetworkRADIUS.
participants (2)
-
Alan DeKok -
Yaël Rozanes