Freeradius 3 & LDAP Generic Attributes
a.cudbardb at freeradius.org
Fri Apr 12 21:21:39 CEST 2013
On 12 Apr 2013, at 15:00, Nicholas Lemberger <nick.lemberger at lkfd.net> wrote:
> The ldap.attrmap syntax in FR2 was:
> checkItem $GENERIC$ radiusCheckItem
> replyItem $GENERIC$ radiusReplyItem
> Basically the ldap attributes radiusCheckItem & radiusReplyItem
> contained FR attr/value pairs which were then added to the
> corresponding attribute list in FR (e.g. in LDAP radiusReplyItem could
> be "Primary-DNS-Server := 22.214.171.124").
> They wouldn't necessarily need to be distinct check/reply attributes
> in the new rlm_ldap... it could work more like unlang where an LDAP
> attribute value could be "control:Disabled := true", and where if the
> list: portion is omitted it would default to reply. No matter how
> this happens, there's probably going to need to be a special case
> syntax made in the rlm_ldap attribute mapping...
I was thinking just adding a valuepair_attr = "blah" config item in the ldap config and then doing exactly what you suggested above.
It's not much work, i'll take a look at it later today or tomorrow.
Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team
More information about the Freeradius-Users