Multiple Radius Group Name

Angel Elena craem at
Mon Apr 23 18:20:01 CEST 2018

Hi group.

I have a freeradius 2.2.5 in a debian 8 box with an OpenLdap database.

A simple query:

angel.elena at bulma:/etc/freeradius$ radtest angel.elena password localhost:1812 0 testing123
Sending Access-Request of id 100 to port 1812
	User-Name = "angel.elena"
	User-Password = "password"
	NAS-IP-Address =
	NAS-Port = 0
	Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host port 1812, id=100, length=47
	Mikrotik-Group = "AAA_ADMIN"

Mikrotik group is a mapped attribute in a ldap.attrmap file and works fine:

replyItem       Mikrotik-Group                  radiusGroupName

for a new setup and to not modify all devices, we need specify two radiusGroupName / Mikrotik-Group in every query, ex:

Mikrotik-Group = "AAA_ADMIN"
Mikrotik-Group = "AAA_CORES"

Is possible specify two radiusGroupName in a simple reply or any idea to set this setup ?


Ángel Elena Medina       _o)
craem at          / \\  _(___V
Zarafa Webapp.

More information about the Freeradius-Users mailing list