Need help for configuration - LDAP with custom files Failover

[Dajka Tamás]

Allready tried it, but not working. The users file:

DEFAULT
    Service-Type = Login-User,
    Fall-Through = 1

DEFAULT
    Ldap-Group != "cn=routing_admins,ou=groups,dc=mydomain,dc=hu",
    Auth-Type := Reject


In the log, I don't see it, if it ever tries to search for group membership. Does it have to do anything with access_attr = uid?

Cheers,

            Tamas
________________________________________
Feladó: freeradius-users-bounces+tdajka=geomant.com at lists.freeradius.org [freeradius-users-bounces+tdajka=geomant.com at lists.freeradius.org], meghatalmazó: tnt at kalik.net [tnt at kalik.net]
Küldve: 2008. október 28. 13:22
Címzett: FreeRadius users mailing list
Tárgy: RE: Need help for configuration - LDAP with custom files Failover

Add Fall-Through = 1 for Service-Type entry.

Ivan Kalik
Kalik Informatika ISP


Dana 28/10/2008, "Dajka Tamás" <tdajka at geomant.com> piše:

>Working, thanks. What about LDAP group membership checking?
>
>DEFAULT
>    Ldap-Group != "cn=routing_admins,ou=groups,dc=mydomain,dc=hu",
>    Auth-Type := Reject
>
>This is not working (inserted after DEFAULT Service-Type = Login-User)
>
>Tamas
>________________________________________
>Feladó: freeradius-users-bounces+tdajka=geomant.com at lists.freeradius.org [freeradius-users-bounces+tdajka=geomant.com at lists.freeradius.org], meghatalmazó: tnt at kalik.net [tnt at kalik.net]
>Küldve: 2008. október 28. 12:18
>Címzett: FreeRadius users mailing list
>Tárgy: RE: Need help for configuration - LDAP with custom files Failover
>
>>As I see, that I should provide "Service-Type = Login-User" in the reply. Is it possible somehow?
>
>DEFAULT
>     Service-Type = Login-User
>
>In users file. Or put it in ciscoextra where avpair is.
>
>Ivan Kalik
>Kalik Informatika ISP
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html