LDAP usage

Jean Carlos Coelho coelho at teltecsolutions.com.br
Wed Dec 11 18:26:20 CET 2013


The question is, I can configure a ³groupsearch² for 2 different
objectclasses when all the database have no groups? (everybody is in the
same group)

Like this..

Group (ALL users at the same group)
- User1 (objectClass - Student)
- User2 (objectClass - Teacher)

Thank's




On 11/12/13 15:20, "John Dennis" <jdennis at redhat.com> wrote:

>On 12/11/2013 11:20 AM, Jean Carlos Coelho wrote:
>> Hi,
>> 
>> Is there some way to configure ldap at radius to read only object
>> classes and not groups? To allow or reject the access to some
>>destination?
>
>This question makes no sense because everything in LDAP belongs to an
>object class. You can't have LDAP data that isn't in an object class.
>
>You can change the LDAP searches to return whatever you want. Figure out
>what you want, modify the search, and act upon the result using unlang.
>There examples on how to do this in the archives of this list.
>
>Hint: use the ldapsearch command line tool to figure out how to
>construct your search, then paste that search into your radius config.
>
>
>-- 
>John
>-
>List info/subscribe/unsubscribe? See
>http://www.freeradius.org/list/users.html
>




More information about the Freeradius-Users mailing list