exec-program dependent on ldap attribute values
Hi, I am using the acct_users file to trigger an external script when an accounting start has been received: DEFAULT Acct-Status-Type == Start Exec-Program = "/etc/freeradius/scripts/acct_start.py %{User-Name}" I would like however for the script to be called only when an LDAP attribute has a certain values. Is this possible? The user's LDAP profile has already been searched for the user's password in the initial auth request, and possibly in the acct request. something like the following does not work: DEFAULT Acct-Status-Type == Start, Account-Status == "inactive" Exec-Program = "/etc/freeradius/scripts/acct_start.py %{User-Name}" where Account-Status is mapped to the LDAP attribute in the ldap-attrmap file. Tariq
"Tariq Rashid" <tariq.rashid@uk.easynet.net> wrote:
I would like however for the script to be called only when an LDAP attribute has a certain values. Is this possible? The user's LDAP profile has already been searched for the user's password in the initial auth request, and possibly in the acct request.
something like the following does not work:
DEFAULT Acct-Status-Type == Start, Account-Status == "inactive" Exec-Program = "/etc/freeradius/scripts/acct_start.py %{User-Name}"
where Account-Status is mapped to the LDAP attribute in the ldap-attrmap file.
Probably because Account-Status is a check item, and not in the request. It will have to go into the request for it to be compared in the acct_users file. Alan DeKok.
participants (2)
-
Alan DeKok -
Tariq Rashid