LDAP no group

[Alan DeKok]

Jean Carlos Coelho wrote:
> Simple question, my client has configured the ldap database with no
> ou=groups, only with ou=people and all the users have some different
> object classes, some “students” and some “teachers”, the ldap database
> does not have the posixgroup or memberUid… my ldap configuration for
> search “group” is:

  The LDAP module assumes a reasonably standard LDAP schema.  If you use
something completely different, it might not work.

> So.. I don’t have a group, I have different object classes for separate
> users, is there some way to collect these informations
> from _brEduAffiliationType_ with rlm_ldap group options? Or I will have
> to create groups and add users to these groups and populate the
> memberUid object for (I know) it work..

  Write an LDAP search string which finds the group information.  Test
it with ldapsearch.  Then, use that search string in the FreeRADIUS
group search configuration.

  Alan DeKok.