group authorization

[Jan-Frode Myklebust]

On Tue, Mar 25, 2014 at 10:41:45PM -0400, Alan DeKok wrote:
> 
>   You did post the debug output in your first message, which was nice:
> 
> Debug:
>   [ldap] performing search in dc=bpk2,dc=com, with filter (uid=brendan)
> 
> You:
> the actual member "value" in the group is the "long"
> version of the uid (uid=brendan,ou=Users,dc=bpk2,dc=com).  is there
> something i can do to use the "long" version?
> 
> Me:
>   Edit the "filter" configuration in raddb/modules/ldap

Should this maybe be the "groupmembership_filter" instead of the "filter"?

Could you please post the output of:

	ldapsearch -h ldap.bpk2.com -D "cn=Manager,dc=bpk2,dc=com" -W -b dc=bpk2,dc=com "(uid=brendan)"

and similar for a group search?



  -jf