ldap and xlat

James J J Hooper jjj.hooper at bristol.ac.uk
Tue May 17 23:54:07 CEST 2011


On 17/05/2011 22:28, Frank Dornheim wrote:
> Dear FreeRADIUS users,
>
> i try to migrate my radius setup to LDAP.
> I use mainly the informations from "Frank Ranner"
> (http://lists.cistron.nl/pipermail/freeradius-users/2007-September/msg00205.html).
>
> Today i have a problem to understand the xlat statement in the "hint" file:
>
> DEFAULT
>         Hint = `%{ldap:ldap:///ou=hosts,dc=whatever?radiusHuntgroupName?one?ipHostNumber=%{NAS-IP-Address}}`
>
> Can anybody explain that, step by step? (yes i read the rlm_ldap doku
> file and tryed the mailinglistsearch)

Hint =  	: Set Hint to the value of the right hand side of the =

%{...} 		: Variable to be expanded

ldap:		: process the next bit with the LDAP module.

%{NAS-IP-Address} : The value of the NAS-IP-Address attribute in the 
request.   ...e.g. 192.0.2.99

ldap:///ou=hosts,dc=whatever?radiusHuntgroupName?one?ipHostNumber=192.0.2.99 
:  LDAP URL as per http://www.ietf.org/rfc/rfc2255.txt

-James




More information about the Freeradius-Users mailing list