FreeRadius ldap queries are not executed

[Matthew Newton]

On 21/03/2025 14:55, Matvey Teplov via Freeradius-Users wrote:
> 
> ldap ms_ad {

Creates an instance of the ldap module, called "ms_ad".

>      server = 'ad-server-cluster'
>      identity = 'CN=labs,OU=Service Accounts,DC=boo,DC=nl'


> The full post_auth was before:
> 
>     post-auth {
> 
>       ldap ms_ad
> 

Makes no sense. Just give the instance name, e.g.

         ms_ad


> (5)   post-auth {
> (5)     [ldap] = noop

Calls the instance "ldap" (presumably before you added "ms_ad" to the end).

> (5)     if (&control:LDAP-Group == "Radius_Admin_Group") {
> (5)     ERROR: Failed retrieving values required to evaluate condition
> (5)     elsif (&control:LDAP-Group == "Radius_ReadOnly_Group") {

> 
> If in the post-auth section has ldap ms_ad as before,  the startup fails altogether with: "/etc/freeradius/3.0/sites-enabled/default[36]: Expecting section start brace '{' after "ldap ms_ad" error.

Because "ldap ms_ad" is a syntax error. Just use the name of the module 
instance.


-- 
Matthew