regexp with ldap

Markus Krause krause at biochem.mpg.de
Sun Nov 27 19:18:40 CET 2005


hello edvin,

as nobody seems to know an answer to my question i modified the filter to

  filter="(dhcpHWAddress=ethernet %{User-Name})"

which works good but has of course nothing to with regexp, thats why i did not
post this "solution"/workaroung to the list.

maybe this can not be done using regexp because it is not a part of a radius
"variable" which must be changed here but an ldap response. i was indeed able
to modify User-Name using attr_rewrite, for example change "aa:bb:cc:dd:ee:ff"
to "aabbccddeeff" but that of course did not help.

if anyone knows a way to achieve this by regexp (or another better / more
sophisticated way) i am still very interested in every example!

regards
   markus

Zitat von Seferovic Edvin <edvin.seferovic at kolp.at>:
> Hello,
>
> has anyone got this working. I have a similar setup, but Ive decided to have
> an extra copy of mac-addresses in my ldap tree for mac-auth.
>
> Markus, have you found a solution?
>
> Regards,
>
> Edvin Seferovic
>
> -----Original Message-----
> From: freeradius-users-bounces at lists.freeradius.org
> [mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Markus
> Krause
> Sent: Donnerstag, 24. November 2005 01:15
> To: freeradius-users at lists.freeradius.org
> Subject: regexp with ldap
>
> hi all,
>
> i am using freeradius 1.0.5 on sles 9.
>
> what i want to achieve:
> network devices send their mac-address to a switch, which then sends
> access-request packages to the freeradius. the mac-addresses are stored in
> an
> ldap tree using the objectclass "dhcpHost" and the entry "dhcpHWAddress"
> (which
> is also used for dhcp).
> unfortunately the attribute dhcpHWAddress contains entries like "ethernet
> 00:11:22:33:44:55" and not only the mac address.
> (how) can i use regexp to get the necessary information from ldap?
> i read variables.txt but seem to be misunderstanding the concept (sorry, i
> am
> not an english native speaker ..). do i have to enter something in the ldap
> section in 'filter="..."' radiusd.conf?
>
> could someone give me some examples?
>
> thanks in advance for any hints!
>
> best regards,
>    markus
>
>
> --
> Markus Krause                           email: krause at biochem.mpg.de
> Computing Center                        Tel.: 089 - 89 40 85 99
> Group Lottspeich / Proteomics           Fax.: 089 - 89 40 85 98
>
> ---------------------------------------------------------------------
>      This message was sent using https://webmail.biochem.mpg.de
> If you encounter any problems please report to rz-linux at biochem.mpg.de
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>


--
Markus Krause                           email: krause at biochem.mpg.de
Computing Center                        Tel.: 089 - 89 40 85 99
Group Lottspeich / Proteomics           Fax.: 089 - 89 40 85 98

---------------------------------------------------------------------
     This message was sent using https://webmail.biochem.mpg.de
If you encounter any problems please report to rz-linux at biochem.mpg.de




More information about the Freeradius-Users mailing list