are multivalued LDAP-attibutes in authorization for replyItems possible?
Hello, I want to return to the radius client radius attributes from LDAP (authorization). I configured the module "LDAP" in radiusd.conf and the authorization in default site in the authorization section due to uncomment "ldap". Then i added my attribute mappings in the ldap.attrmap: replyItem Session-Timeout ldapTimeOut replyItem Idle-Timeout ldapTimeOut replyItem Colubris-AVPair ldapColAvPair and started the radiusd again. All working well, If a attribute is set in the LDAP-Account, the radius client is getting this too. But the ldapColAvPair is a multivalued attribute in LDAP. If I add more then one Value in LDAP for ldapColAvPair, the radiusd delivers only one (the first) to the radius client. Is this normal or can I configure the radiusd to return all values from the multivalued LDAP attribute? Thanx in advance, Tim Stone
Is this normal or can I configure the radiusd to return all values from the multivalued LDAP attribute?
+= http://wiki.freeradius.org/Operators Ivan Kalik Kalik Informatika ISP
Thanks! thats it, u made my day ... I should have read this in the mapping file ... sorry! have a niche weekend! 2009/2/20 <tnt@kalik.net>:
Is this normal or can I configure the radiusd to return all values from the multivalued LDAP attribute?
+=
http://wiki.freeradius.org/Operators
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tim Stone wrote:
But the ldapColAvPair is a multivalued attribute in LDAP. If I add more then one Value in LDAP for ldapColAvPair, the radiusd delivers only one (the first) to the radius client.
Is this normal or can I configure the radiusd to return all values from the multivalued LDAP attribute?
It's normal, IIRC. You'll have to update the LDAP module to change this. Alan DeKok.
participants (3)
-
Alan DeKok -
Tim Stone -
tnt＠kalik.net