freeRADIUS with Active-derectory

[Alan DeKok]

Hangjun He wrote:
>    I have configured ntlm_auth in freeRADIUS talk to AD(user store). And
> It works well.
> Now I want to use ldap to get attribute from AD, It failed.
>  
>    It seems ldapsearch will search user's *display name*. And ntlm_auth
> will search user's *user logon name.*
>  
>      If I set display name same with user logon name, It can work. Is
> there a way let ldapsearch to search user logon name too??

  The LDAP search strings are editable in radiusd.conf.

  Alan DeKok.