Re: avoiding ldap access in authorize

2011-09-30 Thread Alexander Clouter
Fred fred.mai...@gmail.com wrote: If I want to test those values, i used to to something like : if ( Ldap-Group == AdminRW ) { do something } This makes a new ldap access to be done by the server for an array attribute which has already been retrieved by server. Is there any other way to

avoiding ldap access in authorize

2011-09-29 Thread Fred
Hi all, When using ldap with freeradius, radiusGroupName attributes can be retrived during execution of ldap module. groupname_attribute = radiusGroupName groupmembership_filter = ((uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=radiusProfile))