FreeRADIUS, OpenLDAP and F5 VSAs

[Arran Cudbard-Bell]

On 19 May 2014, at 20:36, Ajinkya Fotedar <ajinkyafotedar at gmail.com> wrote:

> Also, the update section under the ldap modules looks like this.
> 
> update {
>         control:Password-With-Header    += 'userPassword'
>         control:NT-Password     := 'ntPassword'
>         control:Prohibited      := 'prohibited'
>         control:Group-Membership    :=  'groupMembership'
>         reply:F5-LTM-User-Info-1    := 'userInfo'
>         reply:F5-LTM-User-Role      := 'userRole'
>         reply:F5-LTM-User-Partition := 'userPartition'
>         reply:F5-LTM-User-Shell     := 'userShell'
> }

Attributes are not retrieved for groups. You need to add profiles with the various reply attributes, and add that profile to the user.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140519/6c12ec52/attachment.pgp>