Using ldap module to return variables to use in other modules.

[Alan DeKok]

David Rickard wrote:
> I modified the ntlm module as follows:
>      exec ntlm_auth {
>                     wait = yes
>                     program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{Bucks-samAccountName}

  Which looks in the request list.

> ldap.attrmap has an extra line (tried as both a check-item and a replyitem. I'm thinking it should be check-item as a replyitem is sent in the RADIUS reply, which I don't want).
> checkItem  Bucks-samAccountName         sAMAccountName

  Which puts the attribute into the check / control list.

  Fix that.

  Use --username=%{control:Bucks-samAccountName}

  Alan DeKok.