How configure freeradius that check user group in Microsoft Active Direcory

[Phil Mayers]

On 23/01/14 20:56, Mathieu Simon (Lists) wrote:

> 2 AD-specific gotchas:

I will add a 3rd - primary group does not appear in memberOf, so you 
can't query it very easily.

> - AD supports nested groups which requires extra attention if you rely
> on them. Look out for LDAP_MATCHING_RULE_IN_CHAIN in conjuction with
> FreeRADIUS.

Hey that is both new to me and really neat; someone should update the FR 
wiki and/or default configs with an example.