Understanding dynamic radiusClients in openldap

Dave Macias davama at gmail.com
Tue Feb 22 20:45:19 UTC 2022


Thank you Alan for the input

Looking at /etc/raddb/mods-enabled/ldap

I see a client section

 client {
base_dn = "${..base_dn}"
filter = '(objectClass=radiusClient)'
template {
}
attribute {
ipaddr = 'radiusClientIdentifier'
secret = 'radiusClientSecret'
}
}

Is this relevant to what I'm trying to do?
Im assuming  I should update it to something like:

base_dn= "ou=radius,${..base_dn}"
scope = 'sub'
attribute {
hostname    = 'radiusClientIdentifier'
secret = 'radiusClientSecret'
shortname = 'radiusClientShortname'
}

Assuming this is relevant, how could I correlate the new attributes
to FreeRADIUS-Client-Blah within my dynamic-clients site?

Thank you

On Tue, Feb 22, 2022 at 2:54 PM Alan DeKok <aland at deployingradius.com>
wrote:

>
> On Feb 22, 2022, at 2:29 PM, Dave Macias <davama at gmail.com> wrote:
> >
> > Arran,
> >
> > i tried your map  as so:
>
>   "map" isn't in v3.  It's only in v4.
>
>   v3 has the "sql_map" module, which only works for SQL.  It should be
> possible to create an "ldap_map" module to do something similar.
>
>   Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>


More information about the Freeradius-Users mailing list