Good Evening !! I thank you in advance for your help. We use the LDAP module to query AD for the correct username and password. We log all entries and recycle every 24 hours. During this login process , would it be possible to query AD for the users first and last name and add it to the log file? Was thinking yes as we could use the BIND credentials during the AD lookup Please confirm for me Thank You
On Mon, 2019-03-18 at 20:32 -0400, Christian Becerra wrote:
I thank you in advance for your help. We use the LDAP module to query AD for the correct username and password. We log all entries and recycle every 24 hours.
During this login process , would it be possible to query AD for the users first and last name and add it to the log file?
Yes, see the "update" section in mods-available/ldap. You can map from LDAP attributes to RADIUS attributes. -- Matthew
Excellent Thank You !!
On Mar 18, 2019, at 8:47 PM, Matthew Newton <mcn@freeradius.org> wrote:
On Mon, 2019-03-18 at 20:32 -0400, Christian Becerra wrote: I thank you in advance for your help. We use the LDAP module to query AD for the correct username and password. We log all entries and recycle every 24 hours.
During this login process , would it be possible to query AD for the users first and last name and add it to the log file?
Yes, see the "update" section in mods-available/ldap.
You can map from LDAP attributes to RADIUS attributes.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Christian Becerra -
Matthew Newton