How to add VAP based on LDAP group membership
Thomas Stather
Thomas.Stather at mpimf-heidelberg.mpg.de
Wed Jan 20 15:47:13 CET 2016
Hello
Ok which one of the following 2 statement is correct:
if
("%{ldap:///ou=hosts,dc=my-company,dc=de?macAddress?sub?macAddress=%u}"
=%{Calling-Station-Id}) {
...
}
if
("%{ldap:///ou=hosts,dc=my-company,dc=de?macAdress?sub?(&(objectClass=ieee802Device)(macAddress=%{Calling-Station-Id}))}")
{
...
}
Best,
Thomas
Am 20.01.2016 um 15:31 schrieb Alan DeKok:
> On Jan 20, 2016, at 9:11 AM, Thomas Stather <Thomas.Stather at mpimf-heidelberg.mpg.de> wrote:
>> Hello
>>
>> To be more specific i want to achieve this:
>>
>> if (Realm == "testdomain.de") {
>>
>> if (calling-station-id -> found in ldap *){
> Use:
>
> if ("%{ldap:....}") {
>
> Write an LDAP query which looks up the calling-station ID, and returns something. Then, put the LDAP query into the line above.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Thomas Stather
IT Services
Tel: +49 6221-486 628
Fax: +49 6221-486 561
------------------------------------------------------------------------
Max Planck Institute for Medical Research (MPImF)
Jahnstrasse 29, 69120 Heidelberg
Germany
More information about the Freeradius-Users
mailing list