LDAP usage

Jean Carlos Coelho coelho at teltecsolutions.com.br
Wed Dec 11 18:26:20 CET 2013

The question is, I can configure a ³groupsearch² for 2 different
objectclasses when all the database have no groups? (everybody is in the
same group)

Like this..

Group (ALL users at the same group)
- User1 (objectClass - Student)
- User2 (objectClass - Teacher)


On 11/12/13 15:20, "John Dennis" <jdennis at redhat.com> wrote:

>On 12/11/2013 11:20 AM, Jean Carlos Coelho wrote:
>> Hi,
>> Is there some way to configure ldap at radius to read only object
>> classes and not groups? To allow or reject the access to some
>This question makes no sense because everything in LDAP belongs to an
>object class. You can't have LDAP data that isn't in an object class.
>You can change the LDAP searches to return whatever you want. Figure out
>what you want, modify the search, and act upon the result using unlang.
>There examples on how to do this in the archives of this list.
>Hint: use the ldapsearch command line tool to figure out how to
>construct your search, then paste that search into your radius config.
>List info/subscribe/unsubscribe? See

More information about the Freeradius-Users mailing list