FreeRADIUS + LDAP + Wireless auth

James Cort james.cort at u4eatech.com
Tue Mar 7 12:16:40 CET 2006


Alan DeKok wrote:
>   Ah, you have DOMAIN\user logging in, and your LDAP server knows
> about "user".
>
>   Try the following in "hints":
>
> DEFAULT User-Name =~ "\\(.*)$"
> 	Menu = "%{1}"
>
>   Then in radiusd.conf, do:
>
> ...
>         ldap {
> ...
>                 filter = "(uid=%{Menu:-%u})"
> ...
>
>   Yes, "menu' is a bad name, but it should work.
>   

Many thanks. 

I had to write the username as "\\\\(.*)$" as the backslashes themselves 
needed escaping, but once that was done it's all working like a charm now.

James.





More information about the Freeradius-Users mailing list