LDAP check attributes

[Antonio Matera]

Hi,
thanks a lot for your answer.
Your solution works fine but I don't understand some things:

1 - If I insert the Cisco-AVPair in the filter and I haven't this 
attribute in my ldap user, I can't authenticate it. Is it possible to 
check the ssid only if it is in the list of the ldap user attributes?

2 - With this solution the following row in the ldap.attrmap is not 
necessary:

checkItem	Cisco-AVPair	radiusCiscoAVPair

whitout it the filter authentication works.
It is not possible to use the ldap.attrmap file to inser a check item?

In this file I have inserted 3 replyItem:

replyItem	Tunnel-Medium-Type	radiusTunnelMediumType
replyItem	Tunnel-Private-Group-Id	radiusTunnelPrivateGroupId
replyItem	Tunnel-Type		radiusTunnelType

if I insert these three attribute in my ldap user they work without 
other configuration. Why the checkItem doesn't work?

3 - the last question is a little different: if I insert in the user 
file this row:

DEFAULT Auth-Type := LDAP

the authentication doesn't work. It is normal or I have some mistakes in 
my configuration?

Thanks a lot
Bye Antonio




on 17/05/2006 9.02 ludovic cailleau said the following:
> Hi
>  
> fillter = 
> "(&(uid=%{Stripped-User-Name:-%{User-Name}})(radiusCiscoAVpair=%{Cisco-AVPair}))"
>  
> regards
>