How to get attributes from active-directory ?

[Alan DeKok]

John wrote:
> Now my freeRADIUS(1.1.6) 

  Why?  That version is *years* out of date.

> can talk to active-directory. How to get
> attributes (such as "Session-Timeout" and "Termination-Action" ..) from AD ?

  Those attributes aren't in AD until you put them there.

> From the debug, freeRADIUS use NTLM_AUTH to authenticate the
> username/password. Is there another tool for me to get the user's
> attributes?

  See the documentation for rlm_ldap, and raddb/ldap.attrmap.  They map
the contents of LDAP to RADIUS attributes.

  Alan DeKok.