Expand Ldap Attribute on Post-Auth section

Alan DeKok aland at deployingradius.com
Tue Jun 7 19:30:51 CEST 2011


Renan wrote:
> So, according to this:
> http://wiki.freeradius.org/Attribute%20support%20by%20processing%20list
> 
> I can only access the User-Name and Auth-Type at my custom exec module,
> and nothing else?

  Uh, no.  The wiki page needs to be reformatted.

  Each module has access to *all* of the attributes in *all* of the
lists.  Which attributes actually exist depend on the packet, and on the
local configuration.

> I just want to access an LDAP value at my exec module without having to
> issue an external ldapsearch and avoid mantaining doubled ldap
> configurations and queries for this.

  You can't use RADIUS to query LDAP from an "exec" module.

  Alan DeKok.



More information about the Freeradius-Users mailing list