LDAP and IPPool

tnt at kalik.net tnt at kalik.net
Mon Nov 9 21:51:49 CET 2009


> I am trying to authenticate users via Freeradius 2.1.7 against LDAP. I
> would like to use a checkItem to determine ippool assignment to give users
> an IP address from defined pools. The LDAP portion is working correctly
> but I receive the message  "Could not find Pool-Name attribute" in my
> debug output (hence no IP address is assigned). What am I missing?

Mapping to Pool-Name attribute. Neither group nor user entry are correct.

> **************************
>
> My user file is as follows:
>
> Default Group-Name == Telecommunictations, Pool-Name :=

That should be Ldap-Group == "Telecommunictations". That default entry
might map the group to Pool-Name.

> "Telecommunications"
>         Fall-Through = Yes
> **************************
> My ldap.attrmap is as follows:
>
> checkItem       radiusemployeedepartment        uabemployeedepartment

There is no such radius attribute as radiusemployeedepartment. Something
like:

checkItem     Pool-Name     uabemployeedepartment

... might work. Pick one of those two approaches.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list