post-auth bash script

[Olivier Beytrison]

On 13.01.2014 11:52, Jean Carlos Coelho wrote:
> Hi!
> 
> Is there some way to execute a shell with freeradius? here’s my scenario:
> 
> - Users login to cisco wi-fi with 3 BSSID (teachers, students or
> employees) with LDAP credentials;
> - I verify if user is at group X, Y or Z (LDAP-Group);
> - *** Now, i need to verify in ldap (ldapsearch/shell) if the
> objectclass “userenalbled” is enabled or “expiredate” is “less” than
> "now” ***

Why ooh why do you want to call a script for that ??

Just adapt your filter in your ldap module, in the user {} section.
For example :

filter =
"(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(userEnabled=enabled)(expireDate<%lZ)"

(this is an example and should be adapted/tested against your directory)

Olivier
-- 

 Olivier Beytrison
 Network & Security Engineer, HES-SO Fribourg
 Mail: olivier at heliosnet.org