LDAP filter by OU Group

Matt Brennan brennanma at gmail.com
Thu Dec 8 04:20:25 CET 2016


Well, to start, you have two commas after your OU=. I believe that is
likely a typo.

On Wed, Dec 7, 2016 at 9:57 PM, Albert K <alberk at gmail.com> wrote:

> Hi,
>
>
> I need some help to assign VLAN to users from a particular OU of Active
> Directory. It does not seems to work.  The code below is the post-auth in
> the inner-tunnel.  At the moment, the filter does not work as always get
> assigned the VLAN 40.
>
> What else should i do to get the filtering to work?.    Thanks.
>
>
>
>
> post-auth {
>
> ldap
>
>         if (LDAP-Group == "OU=hod,,dc=mycompay,dc=com") {
>
> update reply {
>
>                        Tunnel-Type = VLAN
>
>                        Tunnel-Medium-Type = IEEE-802
>
>                        Tunnel-Private-Group-Id = "30"
>
>     }
>
>       }
>
> else {
>        update reply  {
>
>                        Tunnel-Type = VLAN
>
>                        Tunnel-Medium-Type = IEEE-802
>
>                        Tunnel-Private-Group-Id = "40"
>
>                        }
>
>        }
> }
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html


More information about the Freeradius-Users mailing list