returning an arbitrary attribute from LDAP

Sam Hooker sth at noiseplant.com
Mon Oct 12 21:24:14 CEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi folks,

I'm trying to ascertain how to have radiusd return an arbitrary attribute with each successful authentication. My radiusds are doing PEAP/MS-CHAPv2 against Kerberos for authn, and it seems like activating rlm_ldap for authz will cause "Auth-Type = LDAP" to enter my world, which I'm betting will break things. Also, I'm fuzzy as to where I'd do this sort of thing anyway; it seems that post-auth would be the place to start, but am uncertain. Any guidance you could offer (including pointers to existing mailing list threads or other docs) would be much appreciated.


Cheers,

- -sth

sam hooker|sth at noiseplant.com|http://www.noiseplant.com

"I have not failed, I've just found 10,000 ways that won't work."
    Thomas Edison
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version: 0.7.9)

iEYEARECAAYFAkrTglwACgkQX8KByLv3aQ2jdgCgpmoEskDoJGeoN2+ySzKRUqK9
/RUAoMGhPZ651eOj3oXGBtSf8ihwcHWO
=e5Qa
-----END PGP SIGNATURE-----



More information about the Freeradius-Users mailing list