redundant LDAP-Group

Alexander Clouter alex at
Thu Dec 2 14:14:23 CET 2010

Phil Mayers <p.mayers at> wrote:
>> It would be really nice to fold those duplicate LDAP-Group lines into
>> 'ldap_login-LDAP-Group', however alas FreeRADIUS does not love me:
>> ----
>> /etc/freeradius/LOCAL/users-login[1]: Parse error (check) for entry DEFAULT: Invalid octet string "it-switch-admin" for attribute name "ldap_login-LDAP-Group"
>> Errors reading /etc/freeradius/LOCAL/users-login
> AFAICT this doesn't really work because of the way the attributes 
> comparisons are actually handled.
Was wondering if someone out there knew of a neater way to do this?

Twas all.


Alexander Clouter
.sigmonster says: He who has a shady past knows that nice guys finish last.

More information about the Freeradius-Users mailing list