returning an arbitrary attribute from LDAP

Alan DeKok aland at deployingradius.com
Tue Oct 13 07:55:44 CEST 2009


Sam Hooker wrote:
> I'm trying to ascertain how to have radiusd return an arbitrary attribute with each successful authentication. My radiusds are doing PEAP/MS-CHAPv2 against Kerberos for authn, and it seems like activating rlm_ldap for authz will cause "Auth-Type = LDAP" to enter my world, which I'm betting will break things. Also, I'm fuzzy as to where I'd do this sort of thing anyway; it seems that post-auth would be the place to start, but am uncertain. Any guidance you could offer (including pointers to existing mailing list threads or other docs) would be much appreciated.

  See raddb/ldap.attrmap

  Alan DeKok.



More information about the Freeradius-Users mailing list