Expand Ldap Attribute on Post-Auth section
Alan DeKok
aland at deployingradius.com
Tue Jun 7 19:30:51 CEST 2011
Renan wrote:
> So, according to this:
> http://wiki.freeradius.org/Attribute%20support%20by%20processing%20list
>
> I can only access the User-Name and Auth-Type at my custom exec module,
> and nothing else?
Uh, no. The wiki page needs to be reformatted.
Each module has access to *all* of the attributes in *all* of the
lists. Which attributes actually exist depend on the packet, and on the
local configuration.
> I just want to access an LDAP value at my exec module without having to
> issue an external ldapsearch and avoid mantaining doubled ldap
> configurations and queries for this.
You can't use RADIUS to query LDAP from an "exec" module.
Alan DeKok.
More information about the Freeradius-Users
mailing list