Help on users file

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Tue Jun 21 15:44:03 CEST 2016


Hi,
> Hi,
> The example configuration is currently working with Freeradius version 2
> with the same huntgroups and hints.
> 
> 1. file huntgroups
> 
> mytest          NAS-IP-Address == 172.19.xxx.xxx
> 
> 2. file hints
> 
> DEFAULT Suffix == ".mytest"
>         Hint = "MYTEST"
> 
> Authentication and Authorize are configured to bind and search in ldap.
> 
> The following log is from version 2
> rlm_ldap::ldap_groupcmp: User found in group ndrx3tv2
>   [ldap-vpn] ldap_release_conn: Release Id: 0
> [files] users: Matched entry DEFAULT at line 212
> ++[files] returns ok
> 
> 
> Is there a quick example to configure in version 3 and invoke the
> rm_ldap_groupcmp() ?

you can still use the hints and huntgroup.  read the README.rst file to see
what the changes are and where the files now live...
mods-config/preprocess/hints
mods-config/preprocess/huntgroups  

(though , to help, there are usually top level symlinks to these new files).

you then need to edit the required virtual server (eg sites-enabled/default) - ensure
that preprocess is called in the authn/authz stage BEFORE your call to ldap  (and you've configured
the ldap module mods-enabled/ldap once you've put symlink into place....)

read

mods-available/README.rst and
mods-available/ldap


alan


More information about the Freeradius-Users mailing list