FreeRadius LDAP connection to Google Workspce

[Benjamin Diehl]

When I add the if statement I get this error

/etc/freeradius/3.0/sites-enabled/default[451]: Invalid location for 'if'
Errors reading or parsing /etc/freeradius/3.0/radiusd.conf


On Oct 1, 2021, 9:05 AM -0400, Alan DeKok <aland at deployingradius.com>, wrote:
>
>
> > On Oct 1, 2021, at 9:02 AM, Benjamin Diehl <benjamin.diehl at foundationacademy.net> wrote:
> >
> > I am running into an issue with connecting to Google LDAP service (1), oddly enough if I change it from ldaps://ldap.google.com:636 to just ldap://ldap.xxxxxxxxxx it will “connect” but it will change the port to 389. (2) When its on the ldap version it will run but says it fails - ldap: ERROR: Failed performing search: Confidentiality required
>
> Google has docs here:
>
> https://support.google.com/a/answer/9089736?hl=en#zippy=%2Cfreeradius
>
> Note that the recommendation to force "Auth-Type = LDAP" is wrong and stupid. I've filed numerous requests to fix it, and they all get ignored.
>
> So follow their directions for configuring the LDAP module. Ignore everything else.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html