Multiple LDAP (Not failover) lookup...

Garber, Neal Neal.Garber at
Tue Nov 7 22:05:03 CET 2006

> If(authentication in ldap1 success) {

Use ldap1 in the authenticate stage of radiusd.conf

> 	if(productCode attribute exists in ldap2 success) {

Use ldap2 in the authorize stage of radiusd.conf

Authorize is performed first in FreeRadius (you show authenticate
First), but it shouldn't matter for what you're trying to do.  
Configure ldap.attrmap to obtain the productCode attribute.

More information about the Freeradius-Users mailing list