Regex Ldap Group

Rohaizam Abu Bakar haizam at myjaring.net
Tue Feb 19 10:27:53 CET 2008


FR: 1.1.2
Openldap 2.3.X

I tried to do regex match in Ldap-Group. From below users file, The 
"NAS-Identifier" regex works OK but for Ldap-Group match, it's not working 
as below DEBUG log.

value to match (jarService = Y5-IPOH, NAS-Identifier=Y5-IPOH)


Users file
=======

NAS-Identifier =~ "Y5", ldapmain1-Ldap-Group =~ "Y5", Autz-Type := Y5


radiusd.conf
=========
        ldap ldapmain1 {
                 ..............
                groupname_attribute = jarService
                groupmembership_filter = 
"(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectclass=radiusprofile))"
                }


Debug:
=====

rlm_ldap: performing search in ou=CUSTOMER,ou=People,dc=xxxxx,dc=xx, with 
filter (&(jarService=Y5)(&(uid=bacang)(objectclass=radiusprofile)))
rlm_ldap: object not found or got ambiguous search result




--haizam 





More information about the Freeradius-Users mailing list