Active directory ldap groups

tnt at kalik.net tnt at kalik.net
Thu Dec 3 19:27:07 CET 2009


> ldap ldap_staff{
>
> Queries the staff ou in AD
>
> }
>
> ldap ldap_student{
>
> Queries the student ou in AD
>
> }
>
> if(!control:Auth-Type && request:NAS-Port-Type == Async && Ldap-Group ==
> ADGROUP) {
>      update control {
>           Auth-Type = "ntlm_auth"
>      }
> }
>
> ADGROUP is replaced with whichever group has the appropriate users

http://wiki.freeradius.org/Rlm_ldap#Group_Support

Ivan Kalik




More information about the Freeradius-Users mailing list