Referencing LDAP attributes in post-auth

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Mon Dec 19 16:58:26 CET 2011


Hi,

>    Thanks, I'll give it a try and post the debug.  Am I wrong to be surprised
>    that there is no answer for the first question, though?  There has to be a
>    great many users out there using EAP and assigning dynamic VLAN based on
>    LDAP attributes.... or, not?

I know of many - it depends on how you are doing it - are you doing post-auth
in the inner-tunnel, or in the outer virtual-server after EAP has been done?
just assign a standard RADIUS attribute and it will be there for you to use in eg PERL
(so long as you copy-to-tunnel in your EAP config)

alan



More information about the Freeradius-Users mailing list