get attributes from multiple AD domains

[Alan DeKok]

John wrote:
> Again. Now we can get attributes from AD domains using the Global
> Catalog port 3268.
>  
> A new problem: there are 2 same accounts in 2 domains. And we use filter
> = "(sAMAccountName=%{mschap:User-Name})". Looks ldapsearch return 2
> results from AD. And freeRADIUS could not handle this now?  How should I
> do to handle this issue?

  The filter is configurable for a reason.  Add qualifiers to it (or
other parts of the LDAP config) to search for users only in one domain.

  Alan DeKok.