LDAP filter

[Andrés Gómez]

Hi friends!!

In the company where I work, we have a wireless controller which is
authenitcating with a LDAP server using this configuration:


IP address: 192.168.0.10
LDAP Base DN = "plataform.example.com.co"
Admin DN= "cn=roam,dc=example,dc=com,dc=co"
Admin password =  12345
Key attribute = uid
SearchFilter= "userType=managment"

With that configuration the people from managment department can login in
the wireless network.

I can change to SearchFilter= "userType=guest", so the people from
managment department can not login, but guest people can do it.

No we need to use a FreeRadius server to set a new wireless controller that
can't use LDAP authentication. So, I installed freeradius-ldap package, and
I enabled the module. This is my ldap file:

ldap {

        server = "plataform.example.com.co"
        identity = "cn=roam,dc=example,dc=com,dc=co"
        password = 12345
        basedn = "dc=example,dc=com,dc=co"
        ldap_connections_number = 5
...
}

I enabled LDAP module, and reloaded the freeradius configuration and every
works great :D  I can autheniticate using freeradius and Ldap server.

But the issue is: with that setting people from managment department and
guest people can logging in the wireless network, both of them. That is a
problem for me, I need to apply the same Filter that the previous wirless
controller had enabled ( Key attribute = uid and SearchFilter=
"userType=managment")
I have tried using these attibutes in ldap config file:
        filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})"
        base_filter = "(objectclass=radiusprofile)"

I have tried many combinations but I cant' do it work.

Can you give me any advice about how can I configure the freeradius-ldap
module in order to do that filter?

Thanks in advance!!!

Andrés!!