How to add VAP based on LDAP group membership

Thomas Stather Thomas.Stather at mpimf-heidelberg.mpg.de
Wed Jan 20 15:47:13 CET 2016


Hello

Ok which one of the following 2 statement is correct:

if 
("%{ldap:///ou=hosts,dc=my-company,dc=de?macAddress?sub?macAddress=%u}" 
=%{Calling-Station-Id}) {
...
}

if 
("%{ldap:///ou=hosts,dc=my-company,dc=de?macAdress?sub?(&(objectClass=ieee802Device)(macAddress=%{Calling-Station-Id}))}") 
{
...
}


Best,

Thomas

Am 20.01.2016 um 15:31 schrieb Alan DeKok:
> On Jan 20, 2016, at 9:11 AM, Thomas Stather <Thomas.Stather at mpimf-heidelberg.mpg.de> wrote:
>> Hello
>>
>> To be more specific i want to achieve this:
>>
>>    if (Realm == "testdomain.de") {
>>
>>     if (calling-station-id -> found in ldap *){
>    Use:
>
> 	if ("%{ldap:....}") {
>
>    Write an LDAP query which looks up the calling-station ID, and returns something.  Then, put the LDAP query into the line above.
>
>    Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
Thomas Stather
IT Services

Tel:  +49 6221-486 628
Fax: +49 6221-486 561

------------------------------------------------------------------------
Max Planck Institute for Medical Research (MPImF)
Jahnstrasse 29, 69120 Heidelberg
Germany



More information about the Freeradius-Users mailing list