In the sql.conf file there is a %{Realm}attribute, but putting it in the basedn like this basedn="ou=%{Realm},ou=People,dc=mydomain" didnt solve my problem, because the variable wasnt expanded to the realm in the autentication process..
Here is the daemon output: rlm_ldap: performing search in ou=%{Realm}, ou=People, dc=<mydomain>, with filter (uid=<myuser) ------------------------------------------------------------------- \\\\|||//// \ [EMAIL PROTECTED] \ ~ ~ / \ icq 72293951 | @ @ | \ oOo---(_)---oOo------------------------------------------- > "Fernando Costa de Almeida" <[EMAIL PROTECTED]> wrote: > > I have to autenticate both foo@domain1 and foo@domain2 in radius (same = > > username, diferent domains)... How can I do this? Is that possible to = > > set the basedn for the LDAP search dinamically? > > Yes. > > See 'raddb/radiusd.conf' for how to set the basedn. See the other > examples of using %{attribute-name} for how to update the string > dynamically, based on attributes in the request. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html