Need help for configuration authorization with LDAP

[Steffen Langhammer]

Hi all,

I have to do:
- On the wlan-client a LDAP-User with his password should logon wit PEAP
Credentials.
- The LDAP-User should get an authorization if username and passwort is
right AND if he is in LDAP a member of group "wlanclients"

I have done:
- the freeradius 2.1.6 Server is running
- if LDAPUser and it's password is right, the client is getting access

I need help:
- I was creating a definition of the groupmembershipfilter in the ldap
configuration file:

groupmembership_filter =
"(|(&(objectclass=groupofnames)(member=%(control:Ldap-UserDN)(cn=wlanclient)))"
groupmembership_attribute = member
compare_check_items = yes

The result for member is: "cn=steffen,ou=company"
it's the same as the user from login

I think my definition is wrong, what I have to do ?

So I need a sample for a user which is member in group of wlanclient.
If he's not a member he is not allowed to get authorization.

Thank you and best regards
Steffen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20090806/f7e688c7/attachment.html>