LDAP distinguished name escaping

[Rob Johnson [rbj]]

Thanks Arran,

Have you any idea how this can be achieved in practice?

Cheers, Rob

-----Original Message-----
From: Freeradius-Users [mailto:freeradius-users-bounces+rbj=aber.ac.uk at lists.freeradius.org] On Behalf Of Arran Cudbard-Bell
Sent: 16 September 2016 20:05
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Subject: Re: LDAP distinguished name escaping


> On 16 Sep 2016, at 10:04, Alan DeKok <aland at deployingradius.com> wrote:
> 
> On Sep 16, 2016, at 9:58 AM, Rob Johnson [rbj] <rbj at aber.ac.uk> wrote:
>> I am using the python module to return a DN based off the caller IP:
> 
>  The problem is that the LDAP module doesn't trust attributes by default.  It only trusts it's configuration, which comes from the configuration file.
> 
>  There is no simple way in v3 to dynamically create the DN.

If you pass it in as an attribute reference it isn’t escaped… Just means use the raw value of this attribute.

-Arran