I would like to have an ldap group that is another instance of ldap (selected by departmentNumber), but I don't see how to add it into the configuration (users file). ldap everyonePlusMacs { server = "ldap" basedn = "dc=example,dc=com" filter = "(|(&(objectClass=person)(employeenumber=%{User-Name}))(&(objectClass=pers on)(uid=%{User-Name}))(companyHostMacAddress=%{User-Name}))" ... groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=employeeNumber=%{User-Name},ou=peo ple,dc=lanl,dc=gov))(&(objectClass=GroupOfNames)(memberUid=%{User-Name}))))" } ldap NetworkingOnly { server = "ldap" basedn = "dc=example,dc=com" filter = "(|(&(objectClass=person)(employeenumber=%{User-Name})(departmentNumber=IT))(&(objectClass=pers on)(uid=%{User-Name})(departmentNumber=IT)))" ... } ldap SalesOnly { server = "ldap" basedn = "dc=example,dc=com" filter = "(|(&(objectClass=person)(employeenumber=%{User-Name})(departmentNumber=Sales)(&(objectClass=pers on)(uid=%{User-Name})(departmentNumber=Sales)))" ... }
I would like to have an ldap group that is another instance of ldap (selected by departmentNumber), but I don't see how to add it into the configuration (users file).
This is documented: http://wiki.freeradius.org/Rlm_ldap#Group_Support Ivan Kalik Kalik Informatika ISP
I've read that, I just can't seem to make it work, I'm missing something, but can't figure it out. instantiate { ldap NIE { server = "ldap" basedn = "dc=lanl,dc=gov" filter = "(&(departmentNumber=NIE-2)(uid=%{User-Name}))" ... } # Allows the execution of external scripts. # The entire command line (and output) must fit into 253 bytes. # # e.g. Framed-Pool = `%{exec:/bin/echo foo}` exec and in radiusd -X ... radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec ... /etc/raddb/users[83]: Parse error (check) for entry DEFAULT: Unknown vendor name in attribute name "NIE-ldap-Group" Errors reading /etc/raddb/users but instantiate { ldap ldap NIE {... ... exec then in radiusd -X radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_ldap Module: Instantiating ldap ldap { ... } rlm_ldap: Registering ldap_groupcmp for Ldap-Group ... /etc/raddb/users[83]: Parse error (check) for entry DEFAULT: Unknown vendor name in attribute name "NIE-ldap-Group" tnt@kalik.net wrote:
I would like to have an ldap group that is another instance of ldap (selected by departmentNumber), but I don't see how to add it into the configuration (users file).
This is documented:
http://wiki.freeradius.org/Rlm_ldap#Group_Support
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I've read that, I just can't seem to make it work, I'm missing something, but can't figure it out. instantiate { ldap NIE { server = "ldap" basedn = "dc=lanl,dc=gov" filter = "(&(departmentNumber=NIE-2)(uid=%{User-Name}))" ... }
Well, just list NIE in instatiate. Define ldap NIE instance in raddb/modules/ldap. Ivan Kalik Kalik Informatika ISP
Thanks that helped. Also thanks to whomever separated the error message "rlm_ldap: object not found" and "rlm_ldap: got ambiguous search result... tnt@kalik.net wrote:
I've read that, I just can't seem to make it work, I'm missing something, but can't figure it out. instantiate { ldap NIE { server = "ldap" basedn = "dc=lanl,dc=gov" filter = "(&(departmentNumber=NIE-2)(uid=%{User-Name}))" ... }
Well, just list NIE in instatiate. Define ldap NIE instance in raddb/modules/ldap.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Kenneth Grady -
tnt＠kalik.net