Freeradius-Devel Digest, Vol 136, Issue 4

[Alan DeKok]

On Aug 9, 2016, at 2:09 PM, Saeed Khademi <saeedji at gmail.com> wrote:
> I know that we can not put a SWITCH in ldap file.

  And you can't put a switch into the "users" file.

> what I meant was to say about my intention toward my current config.
> another way which I tried and failed was to use a variable. It is possible to
> use a variable in ldap file.

  You can use variables in the base_dn.

> -----------
> in users:
> 
> DEFAUL    ldap-basedn :=  switch ( “&Realm” ) {

  No.  See the documentation for the format of the "users" file.

> and then in ldap:
> 
> base_dn := "%ldap_basedn"

  Again, that's wrong.  See "man unlang" for the format of string expansions.

> My question is that, is is possible to do this somehow and avoid
> putting 3 ldap section in mods-available/ldap ?

  If you follow the documentation, yes.

  Alan DeKok.