Multi-valued LDAP attribute configuration

[Srinivasa R]

Hi Michael,


On Tue, Sep 12, 2017 at 7:30 PM, Michael Ströder <michael at stroeder.com>
wrote:

> Srinivasa R wrote:
>
>> I mean, I am storing 3 different macaddresses (like laptop,
>> tab, & phone) in a single LDAP attribute (multiple value). I
>> want Freerdaius to check all these 3 values from the LDAP
>> before it send "Access-Accept" or "Access-Reject" message.
>>
>
> Instead of comparing client's MAC address with all 3 attribute values you
> could probably simply search the entry with the client's MAC address used
> in the LDAP search filter and reject in case there was no LDAP search
> result.
>
> Also LDAP implements compare requests.
>
> Thanks for your suggstion. I am okay with any method which will make
Freeradius to check all the three values. Could you please explain in more
detail or share me any refernece document to proceed further on this.


> Ciao, Michael.
>
>

Regards,

-- 

Srinivas R